APM resource/webtop based on AD user's dial-in attribute

Can't seem to determine the proper configuration but I'm looking to assign resources based on whether or not a user has dialin access allowed or not. Authentication is setup along with the AD Query option but stuck from there.

Thanks, Mark