Restrict user access to a zerotier network interface

Hi all,

I have a laptop running Arch Linux. I have user accounts “userA” and “userB” setup for it.

I’ve got zerotier-one service running, and have joined two ZT networks “netA” and “netB”.

I want “userA” and “userB” to be able to access “netB”, but I only want “userA” to be able to access “netA”.

Is it possible to restrict user access to specific ZT networks on a machine like this?