When it comes to Agent Procedures I would like to know if the following is possible when it comes to execution of an Agent Procedure

1) Limit the number of PCs(Limit the number of endpoints) 
2) Require authorization if selection incurs multiple PCs(Requires approval if the predetermined amount is exceeded) 
3) Scope the MSP so that they cannot install any software on servers (Create a role that would prevent an tech from installing software on a server host)