A Tier 1 (N1) user role that does not require direct contact with the servers, implemented dynamically (without manual intervention) at the central endpoint.

A Tier 1 (N1) user role that does not require direct contact with the servers, implemented dynamically (without manual intervention) at the central endpoint.

I need a user with the N1 role to see only workstations, not servers. Furthermore, the process of creating new workstations needs to be automatic and dynamic—I don't want to have to manually add each workstation or server to different groups; I simply want them to view only the workstations, not the servers.