You can grant access to Kaspersky Endpoint Agent to individual users or groups of users. As a result, only specified users will be able to manage settings or services of the application.
In the main Web Console window select Devices → Policies and policy profiles.
Select the policy you want to configure.
In the <Policy name> window that opens, select the Application settings tab.
In the Application settings section select the Security settings subsection.
In the User permissions for application service management group of settings, specify the values in the User permissions for application service management and User permissions for application management fields.
To add users and user groups, specify the security descriptor strings using the Security Descriptor Description Language (SDDL).
If you configure the policy settings, in the upper right corner of the group of settings, change the switch from Undefined to Forced.