Configure Approvals to only trigger based on Device / Group

I pinged support regarding this and to their knowledge it is not currently an option and has been submitted as a feature request. Figured I'd see if anyone here has any creative solutions for resolving this.

Essentially we are trying to setup approvals so that they only apply to certain device groups or locations, rather than just applying to all nodes in NCM. See examples below:

We have a group of HP devices named “Critical”. We want to push a config change / firmware to all HP devices, it updates on all devices without approval EXCEPT the ones in the group “Critical” which get sent to an approval queue.

 

Another possible solution would be the ability to exempt devices from the approval process I.E. we have a group of HP devices in a group named “lab”. We want to push a configuration to all HP devices and have the “Lab” devices applied without approval, while all other HP devices get the change sent to the approval queue.

Thanks in advance!