prohibit access to the internet to a group of about twenty pc

Hello everyone. I'm not very familiar with firewalls. I have a "fortigate 90d". I must simply prohibit access to the internet (via wired network) to a group of about twenty pc. This ban must be made by mac address of PC. this rule must be turned on or off at any time. Who can help me please?