A combination of tenanting and class of restriction should get you what you want.

You will need to modify ars.