User accounts

Hey all,

I have a dedicated machine which I don't use and I wanna make a second account to a friend of mine. The thing is that I don't want to give him full access to everything but only on a specific space using specific permissions.

Can you help me? I read some articles online but they are confusing.