Can Cisco privilege levels be used granularly within the 'configure terminal'?

I have looked without success for a way to create a privilege level on a Cisco switch that would allow a user to access 'config t' and then either 'no shut' nor 'shut' a switchport. We really only want the users to be able to do that one task.

I saw that something like this was available through TACACS, but no luck on what commands, or if it's even possible.

Thanks in advance.