Deployment on user based (IAM)

I want to create a single deployment set for computers, where only the software that the user has permission to install is deployed. For example, when a device is set up for a user named Pieter, who has the 'Sales' role, only the sales-related applications he has access to will be installed. Even though all applications are included in the deployment set, only those that Pieter is authorized to use will actually be installed on his system.