OpenVPN client specific override

[pankaj]

Hi,

I've OpenVPN server running on my home network that has 4 underlying VLANs. The server is configured to provide access to all the four VLANs.

https://imgur.com/a/8Ec6y6i

Based on my understanding of OpenVPN documentation, it is possible to restrict a certain client (say user-A) to a subset of the networks. For instance, I created an override for user-A and added following in the CSO:
https://imgur.com/a/hfqZXW7

But user-A is still able to access all the VLANs so either CSO is not working or I understood it incorrectly from the documentation.
I'll appreciate any pointers or anything done incorrectly above.
Thanks.