User Access to CLI with Bash Wrappers

I would like to know if it is possible to create a user i tmsh that will pretty much no access to anything but cli aliases.     Is this possible and how would I go about it.       Thanks...