Wallet that allows users to complete transactions but not withdraw crypto from the wallet. Can It Be Done?

Looking for a way to allow someone to have access to a crypto wallet (i.e. Metamask) to make transactions (swap, bridge, mint nft, etc…) but they will be prevented from withdrawing crypto out of the wallet & sending it to another wallet address.

Does multi-signature have the ability to set preferences for something like this?

The only thing I've seen related to multi-sig is where you need 2 or more wallets connected and to complete any action on it then you will need to get permission from both of the wallets. I just need it implemented when it comes to the action of sending crypto out of the wallet.

How can i go about this?

​