Hey @jbm, there’s no built-in way to restrict things such as user to user PMs based on group memberships. Have you considered turning PMs off entirely?
It sounds as though you’re attempting to partition Discourse down to behave as if it were multiple instances. If this is the case, why not use multisite?