I had a similar problem, so my solution was to have three different VPN groups on the ASA, they all use the same authentication server but each group has different parameters.
Massive question, but if your network is not to large then Cisco Works Small Network Management Suite is a good option. You get some of the best bits of Cisco Works, resource manager essentials which will keep your configs and give you some reports. ...