user permissions

Hi

I want to allow a small set of users to login (via ssh) and disable / enable BGP peers and nothing else.

Can I limit users to just that, or do I have to write scripts and limit users to just running those scripts ?

Alex