Allow SSH login but limit the user to access whole system

Question

I want to allow SSH access for user to use services like SCP, GIT or SSH tunneling. However, I don't want them to use the console shell function from bash.

I force to turn on loginShell as /bin/bash for SSH access or else they can't login to SSH. If I use /bin/false as loginShell, they can't login to SSH at all. However, /bin/bash access allow them to use ssh program putty to login to the system. How may I restrict it?

Answer 1

Just make a group for users that aren't admins or sudoers but can ssh. Lots of info about this if you look into Users and Groups in any Linux manual.