divide all users conected to astaro to 2 group and put different permission

hello every body,

i want someone help me in configure my astart ASG220 V8

i want to divide all users connected to astaro to 2 group

group 1: have full permission to internet

group 2 : have only permission to open 2 website (google-yahoo) only

how can i make these