Hello @Ankur Bawiskar 

I have found this rather complex, I have tried denying the sysID's of the templates with glidequery in a query business rule, I have tried with a client script and glideajax based on a custom field i added on the template (reference to sys_user_group). Nothing seems to work on SOW.