how can I block some site for some user profile in IP hotspot?

RouterOS Virtualization
1

hello
how can I block some site for some user profile in IP hotspot?
for example, if we have 2 user profile
-normal
-VIP

I want to block facebook and youtube for the normal user profile.

thank you