User Groups and IP Address Pools for Point-to-Site
connections in VPN Gateway enable customers to assign distinct IP address pools
to remote users based on their credentials.
With this capability, customers can organize remote users
into separate groups and assign a unique IP address range to each group,
enabling more granular access control for Azure workloads. User groups within a
VPN Gateway can be defined based on Microsoft Entra ID group membership,
certificate common name domains, or custom RADIUS attributes.
This feature helps customers strengthen security, enabling
finer-grained access segmentation and policy enforcement for Azure workloads.