Hi Nicolas,
I only have some basic experience using CPI 3.1
Nevertheless I doubt you can influence the system default device groups. Maybe it's possible to change some XML file in the file system of CPI but I guess that would not be supported.
A dirty and maybe not satisfying workaround would be to build own platform groups under "User defined groups" and fill them dynamically.
The conditions for the user defined "AireOS WLCs" would be:
if "Product Family" equals "Cisco 5500 Series Wireless LAN Controller ..."
or "Product Family" equals "Cisco 2500 Series Wireless LAN Controller ..."
and so on.
SSH access is very crucial for most of the CPI functions and should not be enabled. CPI does CLI template rollout and image rollout over CLI, as well as some inventory collection tasks.
Hope that helps
Cheers
Johannes