AMBA Automation with newly added devices/Change security domain

I am starting out with AMBA and was wondering if the following use case was possible and how I can accomplish it. 

Everyday I have to check the authentication agents to assign an agent to the correct security domain (since the default seems tom be system domain) to a newly added device. I was told by RSA that this can be automated using AMBA. how do I do this? All the workstations currently have a similar naming convention (etf-....) so how do i setup a script that queries the database everyday for that naming convention (wildcard?) and changes the domain from system to "Desired Security Domain"?

Thanks in advance.