N.Y. Comp. Codes R. & Regs. tit. 9, § 5317.12
The interface element setup/configuration menu, or menus, shall be unavailable unless such menus are being used in an authorized access method.