Having dynamic groups based on user attributes (including the custom ones) would be super helpful and easier to maintain in large scale and have the ability to assign dynamically the applications .