For security reasons, this is not intended by vRA. Otherwise, someone from the marketing team could create an any-any-allow rule, for example.
But you can build it yourself with XaaS Blueprints and Custom Workflows in vRO. Unfortunately, I have never found a guide for it that worked properly. You only find snippets and examples and have to help yourself.
Find out how to build custom forms for your XaaS blueprint so that you have a frontend and how to create workflows in vRO and link them to the XaaS blueprint and custom forms. Personally I would program the firewall management directly via the NSX REST API, because the vRO NSX plugin is crap in my opinion.
But maybe someone still knows a good tutorial, which covers exactly this use case.