Patch Management Targeting

I would like to be able to define a patch only for specific machines, while allowing it for others. In SUS this can be done based on group. Is there such a function in DC?