Control access/logins

How can I only allow certain accounts to log in to a workstation. We are creating basic or generic accounts for users to log in with, then they have to assume an account with elevated permissions. We are using RHEL 7 and Red Hat Identity Management.