Assign policy to Active Directory User

Hello

I would like asign Device Control policy to specyfic Active Directory users or groups. I would apply different Device Control policy depend of user loged to endpoint.

Is it possible in SEP Manager?