Limit internal access from AVD

I'm working on a project to implement a privileged access management system that limits certain people to only being able to RDP or SSH to certain hosts.   In the interim however I need to give ext...