can we have Two access profile to single VIP In APM for Single URI. We have two ad groups and that need to differentiate through two access profiles
No, but the APM logic supports lookups to different ad groups in a single policy. We have done that to over 20 AD groups. Also, if you collect/ask for the domain, you can go directly to that domain and check as well.
You can use the same Access Policy and implement a condition based on the AD group within the VPE. Or you can use the Per-request access profile feature (v12)
But you can't have 2 access profiles on the same VS. If you are using two different hostnames for a single VIP, you can configure forwarding traffic to 2 separate internal VS that have an access profile each.