It’s not currently possible with the ST app. There has been talk that this will be added when they roll out hub 2.0. In the mean time, you can install this smart app and create an instance with only those devices you want them to have access to. Instead of using the ST app, they’ll go to the specified URL and be able to control those devices from the web