manage user access on vpn

[mrjoli021]

I have a couple of sites and some require VPN access as well as a number of cloud servers that we create a VPN back to the office. Each user uses different rules to what they can connect to. Right now I am managing all this by creating a static ip per user and building my rules out for each user. This works but I feel that there should be a better solution.
I would like to create some groups and attach the rules to that group somehow. Then just apply the user to that group and done. Doing this would not require a static IP for each vpn user.
Would something like this be possible?