Technically, you don't need a license to use OneDrive for Business, it's "included" in the SharePoint Online license. As for restricting who gets access, you have few methods.
The newest one (and what Microsoft wants you to use) is by group membership, but it's behind a paywall: https://learn.microsoft.com/en-us/sharepoint/limit-access
Some older methods should still work, without any additional costs, such as: https://practical365.com/restrict-creation-of-onedrive-for-business-accounts-for-users/
The relevant setting is now located under More features > User profiles in the new SPO admin center.