[USR-TC] EMAIL ONLY FILTER

There was some discussion a few days ago about creating a filter to allow a user access only to email. Does anyone have a filter that conclusively works for this and how to set it up and make it work? I understand how to use RADIUS to enable the filter on specific users, just not sure what all has to be in the filter. Curious if anyone for sure figured it out. Thanks, Joel