APM Different Authentication level for different URI

Not sure what you are trying to do here. If you want different paths in the VPE for different incoming URI then use Landing URI object. You cannot do anything further after the connection has passed auth and reached the Allow stage. Once it is allowed no ACCESS iRules will execute anymore.