I use VNQM/IPSLA on head end routers that have GRE links to a bunch of remote routers we own and manage. some remotes want to see their "maps" which have the IPSLA on them.
when I create a user, I'd like to be able to limit them to their site's specific IPSLA.
HERE is a link to a forum thread about this
and HERE is a link to the FR in NPM for allowing account limitations for grouping to limit all types of objects to objects within group.