Yes it's possible.
Set up a Custom URL category and add those two domains.
In your Access Policy, assuming it is an AD group for the users, add them as the identity.
In your URL filtering policy - go to Select Custom Categories and select the category you created.
Allow that custom category and block everyuthing else.
Just make sure that these users don;t get hit by an earlier Acces Policy.
Thanks
Chris
