Add-LocalGroupMember

Is there a possibility to disable Add-LocalGroupMember -Group “Administrators” -Member “user123” on a windows 10 machine

Didn’t get your question. Is it about making the cmdlet not available ?

Correct, making the cmdlet not available ?

You hero here will be JEA and is well documented here.

How can I make that the cmdlet Add-LocalGroupMember is unavailable in PSRoleCapabilityFile ( psrc file )