symantec endpoint protection device control block by username

Hi

Can someone please tell me if symantec endpoint protection device control can block by username. i.e. block USB access on any device a certain user or group of users might log onto?

Our management server is controlled by another team and they say NO but I was talking to a supplier and they are saying in version 12 you can.

Thanks