Good Day @farhan.. The best way to do this is go into Settings, Security Cloud Platform and then select Devices. In the upper right part of your window go to Client Configurations. Select "New Client Configurations". Here you can configure how the client will behave based on specified user groups. The option to allow them to Disable the client is under Tamperproof. You will want to check "Allow disabling of Clients". Make sure to not have "Hide Client Icon on System Tray" as the users won't be able to disable the client if they are unable to access it from the system tray or menu bar on the Mac.