Locking a user/customer to a certain app / tab...

Hi, is it possible to give a user (via a role or similar) visibility to only a single app (tab) within the system? So when they log on they do not see the "My Apps" tab but rather are confined to the ...