Thanks Pranav, but with that they CAN login to UCSM and see other business HW< configurations<  and global policies etc, which we would like to restrict.   we already have the ORG & Local created for this business UNIT but with that they have some ac...

We are at UCSM2.2.8g and we would like to restrict some GROUP to just have KVM. i think above post is OLD & may be still valid but could someone help in details please? thank you