Could you expand on this a little? Maybe elaborate a little on your organisation and the use case?
Discourse has lots of ways to control access via groups and trust levels, but the mention of comments suggests an off-site use too. Knowing more would help us provide an accurate answer.