If you only want it on a specific variable then you can update the business rule to be:

var restrictQuery = true;

var variableName = "IO:66c334eac0a8016b017e6affe311ebb6"; //change the sysid here for the sysid of the variable you don't want it to be restricted for

if (gs.hasRole("itil")) {

var map = gs.action.getGlideURI().getMap();

if (map.get('sysparm_name') != null && map.get('sysparm_name') == variableName) {

restrictQuery = false;

}

}

if (restrictQuery) {

current.addActiveQuery();

}