We are looking for a simpler approach to assigning users to "Host collection" directly instead of creating "Host Collection" specific roles. We know that it's possible to manually restrict views with roles but this causes a lot more work than setting permissions directly on the relevant host.

Possible resolution could be providing a built-in role for "managing" host. There should be a way to easily clone such role and set the filtering condition for hostgroup. This feature should be extendable so Katello could add host collection easily.