I want to give access to the internal users of web portals, but not by assigning them as contacts. I don't want their email tracks too. How it can be setup? Or would it require a customization on code level?

If yes, then how?