Yes, that approach would work. Also give some consideration to using SAML. You can then create named roles (which will use your tags) and then apply them to users dynamically. https://documentation.meraki.com/MV/Advanced_Configuration/Restricting_Access_to_Cameras#Role-based_Camera_and_Sensor_Permissions_for_SAML.2FSSO It is quite a bit of work, though, with that many roles.
... View more