Command buttons can be added but they are available / visible to all. In the code you use to execute the button you can add a test for the group the logged user is in and allow it to run if they are.
Just to run the script if they are not in the group or popup a message if you want to be user friendly – and avoid a likely trouble ticket when the command appears to not be working for those users.