Use enrollment keys to place users into groupings which then can be used to restrict activities to particular groupings.