Security role to view only certain computers

Hi all,

We have an environment where we need to separate out roles and ensure that each role has permission to only one set of computers.  For example, a Lab Technician will have access to Lab Machine only, whereas a Production Technician will have permission to production machines only.

Is there a way to separate a role and give it acces to only a subset of computers/agents?