Restrict users shell in CentOS-7

I've deployed CentOS-7 login nodes for users, I want restrict them in resources and command level to prevent nasty activities, so far my search only ended up to **rbash** and **lshell** and etc..., is there any way to achieve in more generic/globally? I only want narrow down the command access to one command. Thanks