Is there a way to deploy zimlets on per user basis. on the same token can a user belong to more than one cos?

We have a situation where we have only few COSes - "student", "staff" etc. but we want to deploy a particular zimlet to only staff who are in HR and finance [or in other words can a user/account belong to staff as well as either HR or finance.

I know we can create separate COS for HR and finance but most of our needs are just met by "staff" COS.

Do you see my point here?