User groups-based restrictions