Admins restricted by asset type/company/etc

Allow for a type of user that would have administrative power but only on certain asset classes and within certain companies. The more granular security is the better if possible :) Please and thank you!