how to give a user privilege to run Ansible commands or just an specific tag?
There is no tool in Ansible to authorize a user to execute selected commands or tags only.

It seems a good idea to use sudo to authorize user to execute selective commands.