Pavel,
resource allocations is very limited in vRA8, hopefully VMWare will improve this when they add multi tenancy back but now there is not a way to split up allocation within a datastore(cluster).
If you could create different datastore(clusters) for each group, then you could split up the groups in different projects or use an ABX action to assign a constraint tag based on membership. Neither one is a very elegant solution.
