What you are describing is supporting two (or more) different setinit (license) options in one single installation and configuration.
1/ As you can deploy/install all loadables on a single machine in one SASHOME location (Foundation) that is an easy solvable technical solution.
You can segregate between those different groups by adding a different setinit to each group. So they only can use the licensed installed software.
In the sashelp there is a file core.sasbcat that is containing the setinit. Extending the SASHELP (sas config file) wit an isolated version will bring you to that wanted kind of processing
The question will be how to manipulated the sasconfig to use this setup. Removing the core.sas7bcat from the original location will bring an additional remember step.
2/ There is no plan from SAS for this kind of setup.
The trick is using /adding a common shared setup and redeploy/copy this to your other machines (DTAP life cycle management).
3/ In the Foundation usermods config file the should be a core.sas7bcat preset not having the stat/or files but supporting the BI/DI metadata
In the <SASAPPServer"> (as many as you like) you can set the config usermods having the core.sas7cat license that you want for that appserver.
With authorization groups you can segregate between those <SASAPPServer>
Do the same for LSF needing that ksh script running sas.
For the license renewal you cannot use the standard renewal approach.
The easiest is running the setinit as found in the SID using a X11 session or SAS/connect with the installers key user context.
---->-- ja karman --<-----