Thank you very much for the feedback! 

The Solution with the User Groups makes sense, and will work for us also fine!

best
Martin