Put different VPN users in different VLANs

[SuperDuperMan]

I have a Cisco 897 router acting as a simple L2TP VPN server which was configured using these steps: http://blogconfigs.blogspot.com/2010/07/configure-l2tp-ipsec-vpn-server-on.html

VPN users are placed into main Vlan1 which can access everything.

I now want some VPN users to only be able to access certain networks or IPs, whilst other VPN users must retain access to everything.  Is there a way to place connections from some usernames into a different Vlan?  Or any other good way of achieving different network accesses for different users?

[shaps]

You can configure the virtual template to autenticate users against a radius server which then allocates a vlan depending on the user information used at dial up, I havent seen this done though with remote access users like you seem to be doing above.