Restrict macro access
By default, all users of a tenant have access to all scripts. You can make scripts available only to members of defined user groups.
Click
Application launcher > 
Administration. 
Configuration is displayed.Click Evaluations and select Macros.
Click the category in which you keep the script.
Select the script, click
Restrict access, and enable Restrict access to user groups. All user groups available on this tenant are displayed. Make sure that a related user group was created in ARIS Administration.Enable the related user groups and click Apply.
The script can be run only by members of the selected user groups.