You can accomplish this a number of different ways.
The first thing I would do however would be to setup a split tunnel policy for anyconnect. You will want this because otherwise the default is to have all traffic (including internet traffic) go through the anyconnect connection. You will likely want to only have traffic destined for your network go through the anyconnect connection. You'll want to setup one of those per-group.
After you've done that, then you can use either 1) a dynamic access policy 2) a vpn filter. to filter access to stuff.
If you only care about giving access to the networks themselves, and aren't restricting by specific ip or ports, you can forego the DAP or vpn filter, as your split tunnel can handle only making available certain networks on anyconnect.
