How to grant access to remote clients?

[impkos]

Good afternoon ! I have many remote clients in my organization.
I need each client to provide access to certain resources within our organization.
Example:
for User1, you need to give access only to the server 10.0.2.3.
User2 needs to be given access only to the resource 10.0.2.4 and 10.0.2.5 and so on.

How can I do that ? Need iptables rules? Or is it enough to write the push route of the desired resource in / etc / openvpn / ccd?