I was surprised by the lack of this already apart of the system, but what I was looking for was the ability to have the system either scan as part of discovery or bulk add per AD OUs (or Security Groups) so that if new machines are added to the system they don't have to be manually added to the SAM / NLM system if we only want machines that are in specific groups / OUs.
The ability to tag a template with groups of templates per OU / Sec Group would be very nice as well.