Mikrotik networking, pptp access to certain resources?

Question

VPN

Good afternoon. We are building a small network at the enterprise. Consultation is required on the correct organization so that there are no problems with scalability in the future.
Given:
1) Central office with a Mikrotik router with a static white IP. Through this router, users access the Internet (mail, browser, etc.) - 192.168.10.0/24 range within the network
2) There are two types of equipment No. 1 and No. 2, industrial controllers with a built-in web server on port 80. #1 - 10.10.0.0/24 #2 - 10.10.1.0/24. The equipment is located at 5 points, the number of equipment at each point may vary. It is planned to install mikrotik routers with LTE modems (gray IP) at the points.
Task:
Organize isolated access outside the office via VPN (windows, android clients) of a certain user to certain specific equipment, at a specific point through the central office router.