Hostle created a multi-user feature for OpenWRT. (https://github.com/Hostle/openwrt-luci-multi-user)
Can this be integrated to LEDE as well. Firewall like PFSense has this feature where you can create a new user group and assign group privileges. Can also disable SSH access to certain users.
That can be achieved with vlans and iptables i think.
In regards to the PFsense question, there's no PFsense package available, if you have a powerful router you could try Snort tho.
Not sure why this isn't in high demand to have multi-user logins. The way pfsense does authentication makes a lot of sense.