Hi! Is there a clever way to negate the ACLs?

A little background: We use Centreon as umbrella monitoring for many different applications. As the IT departmentt is quite big, there are several teams with specific focus. The main crew just cannot help with some of the problems as they are too specific, so a team, i e. ERP crew,  needs to react on the Centreon warnings. We actually can add these services to specific host groups or service groups and use ACLs to show the specific teams. So far so good, but they still appear in the views of the main crew. Of course, we can create an ACL for “all others” and present this to the main crew, but we are afraid that someone will add a service to monitor and forget this setting. The monitored host or service will then be simply invisible. A good solution would be a way to negate the ACL, i.e: resource ACL “hostgroup NOT ERP”.  Any suggestions?