I think that How to create private categories using category permission / security settings might answer your question about how groups and permisions work. You’ll need to change the permissions fro every category that you want to be that way.
4 „Gefällt mir“