AWS IoT GreenGrass Core Auth Component Strategy

Reading the documentation here: https://docs.aws.amazon.com/greengrass/v2/developerguide/client-device-auth-component.html

The policy seems to be applied based on a filter that match thing name: thingName – The name of a client device's AWS IoT thing.

My desired behavior would be to be able to associate Things and Cores within a ThingGroup and use that to apply the Auth policy. My question is:

1. Is there any way to have the Auth component filter the policy based on categories of any type assigned to the Cores and Things
2. Is this desire somehow missing the spirit of what the function of the Auth is trying to achieve

Thank you