> Is there any way to prevent users from adding or changing this parameter in SU3?
No, if you allow to maintain user parameters, e.g. using transaction SU2 or SU3, than the user can choose all of them.
There are no checks restricting parameter names or user exits in module READ_TC_PARAM in include LSUU5I01.
Kind regards
Frank