restrict user access through a specific segment of the COA

We need to restrict user access through a specific segment of the COA, this restriction shouldn't be through role or COA security, as due to the rotation of user activities, there is an unnecessary risk of exposure, is there any other way to carry out this restriction?