How to use PAM to allow 'root' access only from local terminal?

I am new to PAM and its quite complex to pinpoint a specific module or config file, thus asking this. I want to allow root access only from the console i.e if someone is physically present on that system. When someone tries any ways of remote login to root(even if he has the correct password) like ssh, telnet, etc(any means), it should not be allowed. Only when the console is accessed, the root access should be granted on correct password. How do i achieve this by using PAM ?