Private account for administration users

Hello,
My DBAs are connecting to the unix servers with ORACLE account.
I would like to create for each one of them a private user .
Only after connecting in ther private user allow them to su -oracle .
My problem is that i need to prevent them from connecting remothly with SSH as oracle user.
How can i do that ?
Best Regards

OpenSSH has the DenyUsers directive.