Shell access limited to one command or set of commands?

[PCO_it]

Hi,
is there an option to limit specyfic user with shell acces to execute one specyfic command or set of commands?
We added in user panel Effective Privileges: User config - Deny Config Write. Is there any other option, bash profile?

We are installing NAC (Network acceess controll) solution and arp command output is needed.