Linux/Solaris authentication via AD….with a twist

Good day,

I’m hoping to authenticate users on Linux or solaris machines via AD, but be able to control which servers they have access to via AD groups, or some other AD facility. An example would be that we have developers that move from project to project and we would like to have them only access their projects servers, and no others.

Has anyone run into a solution for this?