We have shared management with some of our customers. We would like to set RBAC roles with tags or something. So customer can edit application 1,2,3 but not 4,5,6. Same for contexts, device groups etc