Custom Security Groups Per Asset type

I would like to be able to assign users to groups (some multiple) and then indicate which asset types they can access (such as router/firewall, cameras, etc).