Is it possible to create local users on the pfSense and assign them to groups in some fashion?

Example of what I'd like to be able to do:

User A is in Group A. When User A authenticates as a local firewall user to initiate an Open VPN session, Open VPN then gives that user access to only VLAN A.

I have several departments that only need access to their respective VLANs through remote Open VPN connections.

I realize I could effectively accomplish this running multiple Open VPN servers, but if I can do this with AnyConnect on Cisco, I'm hoping I can do it with Open VPN on pfSense.