Simply by setting the security.
When someone doesn't have access to a microflow that is called by a button they won't see the button at all.
Same for menu items. If a person does not have access to the page behind the menu item, the menu item itself won't be displayed
Try it out by going into your app with different demo users