As we grow in the number of devices we have a need to delegate device actions for specific groups. Can we have an option to restrict a specific role to one (or more groups)?

This would allow department heads to manage their own devices but not manage the devices of middle management or higher.