Looking for a way to limit what a user can see in Access Manager/Studio Monitor.

Unicast addresses in Remote Sources work fine accordingly, but we have content security concerns where someone who may have access one day shouldn't have it the next day, and we cannot constantly change IP addresses to accommodate.

Anyone with similar needs and solutions?