Restrict restore feature in Quarantine to Windows admins only

Hi,

I am searching for the area in the Symantec Endpoint Protection manager that will allow me to control what a general user with a SEP client running on their machine can do in the Quarantine section.  Currently my Endpoint client general users (meaning no administrative rights with their profile) have the ability to restore findings listed in the Quarantine and I want to restrict that ability to only Windows (or local) admins.  Any information would be greatly appreciated.

Thank you.