It would also be nice to have something where non-Admins assigned as a Support User, can only be allowed to purchase from the approved devices list.