how to restrict access of users till ASM only

Hello Anuj,

Yes, you can create appropriate users on "System ›› Users : User List" page.

There are 2 specific roles for ASM - Application Security Administrator and Application Security Editor.

For more details about roles you can look at Help section on "System ›› Users : User List" page.

Thanks, Ivan