Have you read the documentation on permissions? You can absolutely limit what users can do inside instances: