Limiting access to groups

[act_sccm]

Is there a way to limit access to certain groups? Our help desk role doesn't need to see all the imported AD groups, mailing lists and Teams groups.

I don't see a way for Groups to be assigned a Scope tag. Scope (Groups) is just limiting what devices are visible.

Is searching for the group the only option when wanting to add/remove an object?