Reference:
https://docs.microsoft.com/en-us/dynamics365/customer-engagement/customize/manage-access-apps-security-roles Manage access to apps by using security roles.
You can choose what users see and access from the My Apps page or the Customer Engagement home page by giving app access to specific security roles. Users will have access to apps based on the security roles they're assigned to.
1. Go to Settings > My Apps.
2. In the lower-right corner of the app tile you want to manage access for, select More options (...), and then select Manage Roles.
3. Enter the following in the Manage Roles dialog box:
a) App URL Suffix
b) Roles
c) Select Save.
4. Refresh the My Apps page.
5. Go to the Apps Being Edited view, and publish the app again.
https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/customize/manage-access-apps-security-roles