Limit permissions based on object properties

We want to do shared administration in Liquit Workspace / Recast Software Application Workspace. So a select number of packages, contexts, device collections, condition sets, connector, groups etc. should be possible to view/modify/delete and no everything. Like Entra ID got it with Administrative Units or Intune does with Scopes.

This will help us to share device management/application management in Liquit. We have customers that do endpoint management on notebooks and workstation by themself. But the Citrix/RDS environment is managed by us. This ensures that everyone can only manage their own responsibilities