Allow exclusion rules in target groups

I would like to exclude specific devices from my target group. For example create target group that has all the devices from single OU but then exclude device in specific sub OU

Product

Privilege Manager