Access control for specific VS and other departments

Yeah I've looked into that but not sure it's an option. It would require a few weeks on re-configuration to achieve.

Coming from A10 it was fairly simple to add a VIP to a group access control list - something like this would be preferred.

You could also find a bit more granular RBAC with BigIQ. But out of the box the BigIP will not do what you're after. Not yet, anyways.