using virtualmin pro

I want to allow a user to use winscp to access their domain and upload files to their website using sftp.

I created a web ftp user and then went to users and groups and changed their shell to bin/bash which worked, but that gives the user access to the whole server, so I guess this was wrong.

What is the best way to give a user access using sftp so they can upload files to their website. Normally I would just use ftp for something like the website, but this program winscp does not work with ftp (although the next version is supposed to)

Looking at SSH in virtualmin, I thought the users would have shell access automatically.

Also, can I remove the domain portion of their name in the users and groups without causing a problem?