Group-specific permissions in Aggregate

The feature you are describing is pretty similar to this, but I think it differs in that you want different permissions on the server side (e.g., for data managers not for data collectors). Is that correct?