Method for prevention of in-band management / only allow out of band management

we want to limit management access only via the Out of Band interface, I am finding that you can do this via access profiles, is there an easy method of doing this?

Thank you in advance!