We need a way (that doesn't require manual intervention) to give Users Permissions to All Static Groups EXCEPT Groups A, B , C.
We have certain clients that require Certifications to work on their networks. We need a way to allow the bulk of our engineers to access all clients EXCEPT these "certified clients". The easiest way to me would seem to be allow permissions to be applied to a Dynamic Group with a definition of Client <> A OR B OR C. Alternatively one would provide the ability to Apply the Permissions to ALL Static Groups EXCEPT A AND B AND C.
It would seem to me I'm not the first to request this.