How to restrict access to sites on a schedule (Mikrotik + RouterOS)?

Question

Access rights

Good afternoon.
I ask for advice from experienced professionals on the topic of restricting access to sites on a schedule. There is a Mikrotik head router that distributes the Internet by wire and over the air. I would like to implement the following resource access restriction policy:

• Users are divided into groups - I suppose it is possible to identify only by MAC addresses? If yes, how to do it?
  
• Different user groups have access to different site groups
  
• The restriction is valid from 08:00 to 13:00 and from 14:00 to 17:00
  

I am not strong in network administration, I beg you to suggest how it is possible to implement what is described above.

Answer 1

• Blocking sites by URL is fully possible only with the use of a proxy https://wiki.mikrotik.com/wiki/Manual:IP/Proxy#Summary
  
• Identification by IP, for example. In this case, users with different access levels should be placed on different subnets for convenience and apply restrictive pavilions to them through /ip proxy access
  
• As far as I remember, there is no built-in time limiter in the proxy. You will have to use Mikrotik's Sheduler and use the script to turn off and on the rules according to the schedule https://wiki.mikrotik.com/wiki/Manual:System/Scheduler
  

Answer 2

If you need to block sites, not URLs, then you can do it without a proxy. Block by dns regexp or by regexp look for SNI. Mikrotik can do it all. Mikrotik can time based ACL, so you can specify the time when it will be possible or impossible to visit specific sites.