if I understand this correctly,

I am basically

-creating the users/groups
-change the directory permissions to reflect which group is allowed to access that directory

If i am correct, can you give me some command line examples