[Exim] my need

hello everybody ,

I need all users using my server can post all domain or subdomains
of my enterprise but no outside by default.
Only some of them will have privileges to post ouside.

What is the best method to do that please.

many thanks per advance
tony