Diferent policy access user (Active directory)

Would it be possible to create two user groups in Active Directory and each group have a web-filtering policies difernentes?

I'm seeing that singles-access but not sure with FSSO.

What I have is

Active Directory 2008 R2 Fortinet D100 with OS 5.4