It would be nice to be able to limit the execution of global scripts to a few groups of users and hosts. At this point, only one group can be selected.

Adding the ability to select multiple user and host groups in a script assignment will limit the ability to create intermediate groups.
In the attachment I have marked the 2 places I am writing about.