Hi Mustafa,
have shortly checked the auth object. It comes with GRAC_REQ and there is no further restriction possible to dedicately restrict the template management.
As a work around you can remove the application from the launchpad (Access Management) and add to another which is not appliable for normal users. Let me know if you need furhter information on how to achieve this.
Sorry for not having better information.
Regards,
Alessandro