Hello,
The FW performs access authorization and control based on roles. Users of the same role have the same permission. Roles determine users' permission control measures, such as accessible resources, host check policies, and allowed login time ranges. You can add users with the same permission to a role and associate the role with accessible service resources and host check policies. You can refer to the link:https://forum.huawei.com/enterprise/en/dr-wow-q-a-how-to-configure-ssl-vpn-authorization-for-different-users/thread/595358-867
Hope to help you.