Are you using Centrify Express?
If you are, note that Acces control is a feature of the commercial product. The cross-platform feature is called DirectAuthorize. https://community.centrify.com/t5/Centrify-Infrastructure-Services/FAQ-What-is-DirectAuthorize-dzdo-dzwin/td-p/21193
With Express can leverage SSH directives or PAM modifications to achieve it.
Some history on this (e.g. access controls features being exclusive to commercial versions): https://community.centrify.com/t5/Centrify-Express/access-controls/td-p/18397
R.P