Forum Discussion
As there are no other answers, I'll provide a few suggestions. I'm by no means an expert on APM.
As far as I understand it isn't possible to change the APM policy after the client has connected, as the APM cookie is set as the first thing. I might be wrong, but I see no option to change the access profile on clouddocs.
1st, easiest solution
What you might be able to do instead is create a single APM and the branch that based on which service has been requested. You would need to verify that it doesn't automatically allow access to the other sites.
2nd, reconfigure system
I haven't tested this, but it shoud be possible. In the irules that define which service is your destination, you will have to change the pool with a new virtual server. You can then create X amount of internal virtual servers, each with their own access profile.