I'm trying to deploy veyon throughout our school for all teachers to monitor student laptops/pcs. With a basic config it's all working as expected however I'm wanting to configure the access rules to only allow departments to access their laptops rather than the whole inventory.

I've set up an access rule on the teacher device that is Accessing User is a member of group Science and local computer is located at Science. On the pupil device I have the rule Accessing User is a member of group Staff.

This setup prevents staff members from opening Veyon at all, removing the local computer rule then allows them access again but gives full access to all devices.

Am I missing something or misunderstanding how this should be set up? Any help would be appreciated as I've been at this for days now.