How to set ACL in Cisco ASA VPN from IAS

Cisco ASA can work with access lists from IAS Radius. Add to the IAS policy the attribute 'Cisco-AV-Pair' as example:
ip:inacl#1=permit ip host 192.168.1.1 any
and
ip:inacl#2=permit ip any host 192.168.1.1
This will limit IP traffic only to/from this host.