As per current design , we can choose Video mesh as the media resource at org level. This will allow all cloud registered devices in the org utilize the vmn in common. However, if the vmn needs to utilized only by certain devices used for executives we don't have any option to limit to some devices / IP subnets. This would help to selectively choose which device / user should use VMN and others use direct cloud.