restrict services by group membership

[paul]

Hi all,

I wonder if it is possible to restrict access to a service by group 
membership; say VPN access to a group "vpnusers". Or is there another 
way to do this?

thanks
  Paul