
You can restrict access to the launchpad designer at the OData service level.
The administrator using the launchpad designer should have the PFCG role SAP_UI2_ADMIN_700 assigned.
The launchpad user must not have authorization to run /UI2/PAGE_BUILDER_CONF and /UI2/PAGE_BUILDER_CUST OData service.