global protect

[AnnamalaiRM]

i need enable remote 10.10.10.10 for particular user , user shouldn't connect to other application or RDP access

[arusharma]

You can create separate client config for that particular user and only allow 10.10.10.10 subnet to be accessed. 

[Ashish_Kushwaha]

you can create a two policy, first to allow the particular resource access and second to block the access for all resource access.