Regular users should not be using sqlplus, but rather some other user interface. If there is none, you should develop maybe a quick APEX application or such.

If these are "power" users, they should already know how to code sqlplus parameters and variables.

Anyway you should maybe read about sqlplus variables in the fine Oracle SQL*Plus® User's Guide and Reference.