How to restrict users to SFTP only instead of SSH?

Scenarios:

* You want to give file upload/download access to your users.
* You don't want to give shell access to your users.

For the above scenarios,

Method 1:

To give a user account SFTP access without SSH access,set the user shell to /usr/libexec/openssh/sftp-server instead of /bin/bash.


Method 2:

Restrict the shell access by rssh.