Azure Assign user access to one application on a VM

Hi

Is it possible to give a user access to one application on a VM in Azure?
I already created a user and assigned them a role of Virtual Machine User.
Is it possible to further refine this role to one application on the VM?