I agree with the other points mentions on this thread, but if you have a valid use case then you need to modify the ux_route ACL which can be found with the link below. Just add your instance ID in the URL and on the ACL modify the roles to only include sam_admin rather than sam_user.
https://<YOUR_INSTNACE>.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=0352cb2577321110d1b916409c5a9979
