How can administrative tasks be hidden from the BPM for an employee role?

Summary:

Any user can enter the BPM from the WORKLIST button and can view the administrative tasks (all transactions), how can you customize to hide these tasks from the BPM. Or how to give access to the BPM only to certain roles?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):