@borlinjo1 hi, you can use AAA for this. enable accounting features to monitor commands and same time you can use authorization to control commands. Cisco ISE is good solution for this.
Please rate this and mark as solution/answer, if this resolved your issue
Good luck
KB