Is there a way to setup a user role so that they can manage all computers and all devices (like and administrator), except for computers and devices in a specific 'Static Unique' group?