Limit a users access to Data Warehouse and ASI Slots

I have some users that I want to allow to use Data Warehouse, but not to use the ASI slots. Currently an admin can remove a user's access from Data Warehouse but not remove them from using the ASI slots. Each of these should have individual access settings in the Tools section of the Group Manager.