How to restrict vpn users from using certain core network resources?

Question

Computer networks

Good afternoon, I use a Zyxel USG 300 hardware gateway with a raised vpn server, how to prevent certain
vpn users from accessing certain parts of the network?
There are users who are allowed to have access to the entire network (local and vpn users), there are also users (future vpn users) who should only have access to one server that is physically connected to a different gateway interface. What settings need to be made to restrict new vpn users?
Thank you all in advance for your participation!

Answer 1

See Configuration → Firewall. All accesses are configured there, including it is possible to distinguish between users.

Answer 2

Specify only this address in the routing table.
Either firewall

Answer 3

I don’t know what kind of VPN you have there, but there probably is an opportunity to apply a policy for the VPN user (something like user-aware access control).