Restrict access for specific user

You can lock the user to TL0.