Remotely authenticated users for iControl Rest

Why not authenticate the user to AD, verify he's a member of a specific group, then proceed with the rest of the script with LTM admin credentials. This way the user won't have access to the LTM console, but will still work within your iRest script. I'm doing this with a web interface.