OpenVPN restrict 1 client network access

[tsupport]

Hi,

We have OpenVPN setup and working great for remote users, but we have a requirement for 1 user who is an external company to connect and we want to be able to restrict their access on the network to only 2 ip address's internally.

I am assuming that we can either assign an IP address to that specific user and then setup firewall rules to restrict or allow, but I can see anywhere to assign a specific IP address in Opnsense (used to do this in pfsense).

Can anyone guide me on the best way to do this?

Thanks