Hi
yes you can do it. It's called IDFW (Identity Firewall). You need minimum 8.4.2 code and not supported on Windows 2003 R2.
You need to have access to Windows AD server as you have to install an agent.
Here is a great and simple post:
https://supportforums.cisco.com/document/80646/asa-idfw-identity-firewall-step-step-configuration
Thanks
PS: Please don't forget to rate and mark as correct answer if this answered your question
Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question