Access control isn't allowing device subsets

Hi,

I have an issue I currently can't solve with the possibilities access control gives me :

• There are several users configured, which should have access rights to different type of device :

  • Tech supports should be able to access : cashier desks, servers, office desks, ...
  • Accountants should be able to access cashier desks, servers
  • Admin should be able to access every device

• If I assign a strategy to cashier desks so that accountants can access it, I can't make a broader strategy for tech support to include both cashier desks and servers for example

• Groups can only be assigned to users

• Devices can only be assigned to one user

I cannot wrap my head around how I could solve this with the current way access control works.
Please enlighten me or let's see how this can be changed to be able to have such configurations.

Thanks

The issue names no files, tests, or entry points; start by tracing the existing access-control model for strategies, user groups, and device assignments. Done would be a documented or implemented way to express overlapping device subsets for the listed user roles, with behavior verified for cashier desks, servers, office desks, and all devices.