We have two permission sets, using these permission sets you can restrict your user access- 

  • Non-Admin Permission Sets - In this permission set, the user can access only lightning components MassFileDownloadLightningComponent and MassFileDownloadRelatedFilesLightningComponent on the record page. 
  • Admin Permission Sets - In this permission set, we added all MFD app permission except the About Mass File Download Tab configuration permissions. Users can see the About File Download Tab but can’t modify the settings.