Disable Content Type Installation and Update for single User

I have H5P with Node js running on an IIS.

I want to be able to set for each H5P user if he is allowed to install and update content types. In my used library there is already such a token but this does not work. The token is called UpdateAndInstallLibraries but when I set this rule to false the user can update and install content types as before.

Is there a way to fix this or a other way to implement a permission to restrict this fpr sigle Users?