Set GSS Security to Only See Specific Group

Hi All,

We are an organization with multiple sites and each site has a designated Tech Support person. We are moving from Altiris 6.9 to GSS. I only want the building techs to see the building they are assigned to as far groups when they login. I have set security to where they cannot make changes to clients listed under other  groups/ sites but I would like them to not be able to see the other groups either. Just their assignment.

Below is an example of what the STEM tech sees when logged in.  As you can see, the "Middle Schools" and "North" groups are visable. He needs to only see STEM HS and all items listed there. Any ideas where to enable that?

I know this is possible in 6.9 but as far as I can tell my setup is the same as I build GSS.