Use bindKey at serverside and then check with isObjectInACLGroup, getAccountName, getPlayerAccount and aclGetGroup or the player is in the correct group to use the function. (Check the example, it's litterly given.) If he has permissions to use it, then trigger towards the client that used the bindKey function and do what you want to do.