Exclude assets per Realm

[kostasandre]

Hi all,
i have configured and run openremote using the custom template guide. Im trying to have a multi tenant setup where tenant users. (except master, super admin user) should see only specific custom assets as read-only/ write attributes available.
The concept is that the tenants will define devices only through provisioning process. The device should be preconfigured and the users can only read/write attribute data, remove device, create groups of devices.
The restriction should be both UI related but also server side in case someone tries directly to call the server and bypass the UI app.
I have tried to configure from the manger_config.json file the below

"pages": {
    "assets": {
      "tree": {
        "add": {
          "typesParent": {
            "default": {
              "exclude": [
                "BuildingAsset",
                "PlugAsset",
                "CityAsset",
                "ThingAsset"
              ]

            }
          }
        }
      }
    }
  }

Although the above might work when i change the “default” under “typesParent” property attribute to my custom realm name the exclusion is not happening. Is there any workaround on that? Also how can this restriction be feasible server side too?
Thanks