add  group on your application menu by xml , or inherite  menuitem, for example:

    id="menu_hr_root"
    name="Employees"
    groups="base.group_user"
    web_icon="hr,static/description/icon.svg"
    sequence="185"/>

You can set only group of 'system/settings' can access the apps menu.