PowerShell remoting gives you access to all of the functionality on the box by default. You can created constrained (or restricted) endpoints that limit that functionality to specific cmdlets.
Alternatively you can use Just Enough Admin (JEA) to lock… Read the full text.