The manage_options capability allows a user to do most anything in wp-admin.
So focusing on the bp-tools screen seems like a minor issue.
Preventing access to that screen while allowing them to have access to everything else seems like a recipe for trouble.
But if you are committed to preventing that access, the easiest approach would be to redirect them when they try to access it.