SSL Mobile VPN

Hello, I've got a question on traffic rules for SSL VPN users. Is it possible to create connection policies for different user groups? I understand that all authentication groups are automatically added to the SSLVPN Users group, but what if I want to dictate traffic rules for different users? Different VPN users have different resource requirements, but I didn't see any clear guidance for setting this up. Ideally, I would like to force all traffic through the tunnel and use firewall policies to manage which networks/resources different user groups can connect to (ie, get rid/modify the default Any-Any SSL VPN policy).

Is this possible?