How can I minimize a user's permissions based on a required operation?

Question

I\'m using Debian: I would like to host a VPN, and I want to limit the vulnerabilities by reducing the number of powers the user who hosts the server has access to. Is this