Basically for those particular users you would like to restrict the archive creation or final archive set, you have to revoke them the proper rights. This is valid also for the CSR not assigned to them. There exist specific rights for the most steps.
1. Go to Maintenance | Security Setting | User Maintenance, highlight the user you want to restrict and click the Access information button. For each particular Service Domain, expand both left and right pane and on the right pane highlight the proper SD associated with the User class then click on the Class Rights button.
At this point locate for each category (PS,APP, Generic) the proper right you want to add/delete (revoke) from the new window pane. In this specific case the right you should delete from the right pane is under
PS Object Mgmt | PS Object - Add Archive set
NOTE: for each class right item you have at the bottom a short description of the right. I will attach a screenshot for you.
