VPN and RADIUS

Hi

We have SSL VPN setup with with RADIUS as the authentication server

But I had a few questions

With RADIUS enabled the user account we setup will get automatically authenticated but how do we restrict access based on User Groups if there is no LDAP Lookup for groups?

Is there a way to control which user can have access whilst still using RADIUS?

J