Shameless plug, but I created a HACS integration that allows to restrict dashboards on a user level: DashBouncer