GUI to en- or disable ONE service (Strongswan IPsec)

[Voho]

Hi all

Is there a way to limit a user to start and stop only the strongswan service?

Background: I do have customers which want to limit access as much as possible.
Only if a verfied user on site allows the traffic to the customer, I should have access.

So I thought it's the easiest way to stop IPsec.
Or do you have any other recommendations?

Best regards
Holger