WVD and limiting access based on machine?

Hi all, has anyone been able to restrict access to WVD based on machine name?  We would like to create a group of AAD Hybrid-Join Machines that ARE allowed access and use either the WVD Client or Web App and then a block everyone else.  We thought about trying to use CA and compliance policies but have come up short there.

Maybe something machine based?

Anyone have any ideas?

Thanks,

Lance