Chapter 16 SSL VPN for FortiOS 5.0 : Setup examples : Multiple user groups with different access permissions example
  
Multiple user groups with different access permissions example
You might need to provide access to several user groups with different access permissions. Consider the following example topology in which users on the Internet have controlled access to servers and workstations on private networks behind a FortiGate unit.
Figure 313: SSL VPN configuration for different access permissions by user group
In this example configuration, there are two users:
user1 can access the servers on Subnet_1
user2 can access the workstation PCs on Subnet_2
You could easily add more users to either user group to provide them access to the user group’s assigned web portal.