How to define for can't have acess to some specific trunk?

how to define in FreePBX that some extension can’t have acess to some specific trunk?

thanks