Currently each grop in under Clients you can only have one of two options for policie exceptions. I can have [shared] or [non-shared].
I have groups that requier very spicific exceptions so I have to us a non-shared exception BUT when I need to apply a global [shared] exception I have to go through all my non-shared and manualy add it to each of them.
Each group in SEPM should have it's own perminit, local only exceptions and also be a member of a shared policie.
I should have a way to apply globle setting to a shared police & add group spicific (local) settings (exceptions) too.
If there's duplication, ignor it. That's up to me to figure out.
This should work something like AD, you have domain policies and local policies. NOT one or the other.
Thank you,
~Ben