[OkayPhysicist]

The separate account is, in fact, the way to do exactly this. Settings->System->Multiple Users->Add User. Follow the on screen prompts to set it up the second user with Parental Controls. Selecting which user to access the phone as is available on the lock screen.

[BeetleB]

Thanks - will try it.