Hello 7rrivera7,
I would recommend setting up a VLAN for the customer and disabling Inter-VLAN Routing. Here is a guide to creating VLANs.
You can also tie that VLAN ID to an SSID if the tenant would like wifi.