Use whatever you test with now. Hide the button if not allowed to access.
The way I have done it in one of my DBs is to check the user access as they log in, and store it in a TempVar for the use of the session. A global variable would work just as well, or even a class (which is way beyond my skill level
Saves having to check it each time.
The user access levels are in a table as I would expect yours are.?