Set login restrictions at user/group level instead of company level

We currently restrict log-in to local IPs only.  While we want to enforce that restriction for the majority of users, there is a subset of users who should be able to login to omniture from various locations.  It would be helpful to allow or restrict non-local access based on group membership.