There is currently no way to restrict a user to only book for themself. The default functionality allows them to book for any employee and for visitors but the organization does not want people to book for others whether it be accidentally or maliciously. I can imagine that preventing users from booking spaces for others is a common use case and I am a little surprised that this is not possible.

I have tried using a VPA restriction but it only seems to affect WebCentral Hoteling and not Workspace Hoteling. I don't know if this is a bug or as designed but VPA functionality should apply to Workplace and not just the classic WebCentral views. This inconsistency can lead to some frustration and confusion.