Deny individual users the openVPN login via RADIUS.

[webps]

Can individual users for OpenVPN login be accepted / rejected in FreeRadius Userlist? An assignment via the Class: = "local" to a group is possible, but the OpenVPN login cannot be prohibited via the group. Just if I assign to "admins" no login over VPN is possible anymore, but that is not a good solution.