select the specific GP object go to Delegation tab and click Advanced (left bottom corner) add specific User/Group set permission for User/Group to Deny