If this is your requirement, then you can rely on dynamic membership security groups. This way your VMs will be members of these groups automatically based on a certain criteria such as OS name, VM name, .... This will serve the requirement for existing and newly created VMs as well.
Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly.
Cheers,
@vExpertConsult
www.vexpertconsultancy.com
VCIX-DCV 2018 | VCIX-NV 2019 | VCAP7-CMA Design | vSAN Specialist | vExpert ** | vExpert NSX | vExpert vSAN