Is there a way to monitor a user's input on a cisco device? 

Clarification: the commands a user have entered as in configuration mode AND normal mode. (especialy normal mode. Configuration mode can be done with "show history").