Why is the config per device and not the concept of per user?

I'm new to this and just trying it out but seems I need an endpoint for every device and to associate profiles and schedules to each endpoint. Seems an obvious use case that I want to block what a person has access to and a person has access to multiple devices. So why make me duplicate config for each device when it's obvious the same settings need to apply to all of them?