Is there a way to restrict the running of Config Change Templates on a per user or per group basis? I'd like for one user to be able to run certain Config Change Templates but not give them rights to run all.
This is not possible as far as I can see. They either have access or they don't.
You would have to do user management and remove NCM rights from everyone except the "Chosen One" that is really the only way.