@JaneToo I think this thread will help you. It is about removing, but you could also disable it. In BeforeToolClick you could also check for this tool and a user and or a security group and just set args.Handled = true so it would not fire off the action.