An administrator can limit the visibility of portal Publish Locations for the Publish to Astoria Portal command using Role Group membership definitions.
Role Groups can be inherited, so Role membership can be defined at an appropriate level within the repository, such as at the Cabinet or a folder location (such as in translation cabinets). Membership can also be defined at the Global or Backstop levels.
Role Group or user members are defined on a repository object using the Define Access Controls command's Roles tab. Select the Role Group name and Add it to the Present pane. Then with that name selected, add users or groups to the Present panes and click OK. See Assigning Role Membership.
When a user issues the Publish to Astoria Portal command on an on object that inherits the Role membership, they can select a Publish Location for which they are authorized, or one that is not limited by Role membership.