VPN with different firewalling per user

[djdodo]

Hi!
How do I create one VPN with different local users, with different firewall rules to prevent them from accessing systems they are not allowed.
I did this with one existing VPN and did a client override with ifconfig-push.
But I don´t know what happens when a normal user gets the IP.
Do I really need to configure an override for every user?

Greets,

Dominik