What method of authentication are you using? forms, basic or other?
if basic or forms then you can hide the link and or protect the page using this
if not My.User.IsInRole("administrators") then
'do something like redirect to menu or hide the link
end if
note. in forms you will have to set the httpcontext of the user in order to check their groups