The present invention provides a method and apparatus for granular management of network resources by accessing network device resources through associated references. In one embodiment, the references are group names, and one or more resources (i.e., a resource collection) within each network device in a telecommunications network may be linked with one or more group names. Group names (or other types of references) may then be used to limit a user's access to particular network device resources. That is, a user may only have access to those resources associated with group names to which the user has access. Over time, network device resources may be associated or disassociated with particular group names. As a result, group names provide users with dynamic access to network device resources. In one embodiment, the groups to which a user has access are defined within a user profile associated with the user. Grouping network device resources, therefore, allows for a granular view of each network device in the network by limiting a user's access to those resources corresponding to group names listed in their user profile. As one example, grouping may allow for customer network management--that is a customer's view is limited to only those network device resources for which they have subscribed.