How do I ensure my end users can only access agent explorer for the pillar they have access to?

Summary:

I am trying to create agents for our Procurement end users to only use agents in the Procurement Family. However, I do not want the end user to access AI agent studio under tools to modify agents. Additionally, when I am publishing agents for one family, all agents are showing up under explorer. I only want to show selected set of agents for procurement for the user. What steps do I need to follow to achieve this?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

25C

Code Snippet (add any code snippets that support your topic, if applicable):