If you go to Users / Accounting / Accounting Class. First you enable Accounting. After you can create an accounting class or use default to limit connection time and assign it to each user.
I hope in the future we can use group to define this kind of solution.
You can modify kerberos option for user to limit his connection. But I think Accounting is more efficient to give a general rule.
Hope this help