User outside of group accessing task

I donot want users from other group which I have not mentioned in candidate group in bpmn to be able to claim the task. They should be only able to read it.