Yes there is, You can use ACLs to grant or deny permissions to a user or a group of users to invoke a menu command for a specific KM application instance. For example, a user may have permission to execute a certain menu command on a test system instance, but not on the production system instance running on the same managed system computer.
For specific information on how to set ACL settings on menu commands, please read the section on Using ACLs on Menu Commands, pages 98-99, in the PATROL Central Operator – Microsoft Windows Edition Getting Started guide. It has a very clear example on this very task.
Hope that helps.