Possible security options for ICP

Summary:

Possible security options for ICP

Content (please ensure you mask any confidential information):

Hi Team,

I am aware that visibility of ICPs are completely controlled by actions and until now we do not have the capability of controlling the same using roles, the way we do for WFC Plans.

Though still if we have a use case that only a certain group of users should be able to award the same, what would be the best workaround? Would it be that you configure approval rule to automatically reject any submission by any users except the allowed ones? Or use any actions and use Deep Link?