How can I restrict a User's access to the App ?

By default, the App is available to all Jira Users.

If required, you can limit access to only specified Jira User Groups.
This can be done by configuring the App permissions under Jira System Global Permissions.

Please refer to Jira Global Permissions Page more more details.