Zend certified PHP/Magento developer

how to block Sudo for a specific application/service

As an admin, I’m looking to see if there is a way for me to set limitations on the Linux devices we use for development. (i.e)- I want to give my users SUDO access / the ability to use sudo IF needed, But they can’t Start or Stop running background applications.

example: we have crowd strike running and don’t want the user to start and stop it when they want

Similar to how I can have Admin Access to users in Windows but can restrict what they can use admin access for And is there a way to get logs of what they use the Sudo command on?

I have not tried anything except creating a VM with Linux and creating a guest account but some codes need SUDO command so I gave the account sudo access