Menu security group structure strategies?

[skhayatt (Sam Khayatt)]

This post from long ago has Tim Shoemaker’s approach which may be useful:

Security Groups/Users limited menu item access

Finance would like to limit a user that has access to a security group to not have access to two menu items within that security group. What is the best way to approach this? We don’t want to have to create an entirely new security group just to accommodate this one user’s limited access within that security group.