Hi Vishal,
It sounds like you have not tried this out with the user security scenario you have described. Part of the learning process is to try what has been suggested in the context of your own scenario and then ask further questions if issues arise. The display of the tiles is based on whether or not the assigned data source contains data, which in turn is influenced by the user security. So as long as you check for whether data exists or not, I expect you'll find that the tiles are displayed as desired and consistent with the security assignments.
Regards,
Mustafa.