Access Roles

Hi,

I am trying to understand how to restrict access to resources in ViPR for groups. I will use the example of Prod and Dev. I can see based on Virtual Array's and Virtual Pools I can restrict based on Tenants. I did not see anyway to restrict based on hosts. So in the case of hosts is it assumed that the hosts will be included in the Virtual Array and so be restricted based on that? Which means I would have to create a Virtual Array for each group of servers and other resources? Basically how do I prevent hosts that belong to a different group from showing up when provisioning storage to a host?

Thanks