@kartoon were you able to resolve your issue? Groups are definitely the way to go as you suggest yourself. You have to set up your groups and categories so that only the members have access to the categories that you want to have access. There is no way in Disourse to create a group that excludes them from categories.