Account limitation is based on including a selection within an account. It would be extremely helpful and time saving to have a way of excluding a selection. For example, This account can see everything except subnet a.b.c.d
Many thanks