Hi MBhatti,
We have done this for a number of customers already, yes. We follow the rules right from the licensing guide to provide read only access to all entities, appropriate additional create / update / delete / append / append to, etc. for entities like Account, Contact, custom entities, etc.
Overall there is no specific guideline on this and I did submit a user voice on this as well but am having trouble finding it :(