User groups

We would like to be able to assign our customers to different groups (i.e. Internal, Testing, Public). We would then grant access to individual product releases based on group membership. Customers would be assigned to groups manually (by an admin) or eventually through self-service routes like the user portal or invite links.