Port-based VLANs are exactly the thing you're talking about.

Configure each group's interfaces as Access and with a separate PVID (from 1-4094) per group. Make sure you keep Ingress filtering enabled (drops frames tagged for any other VLAN than the configured one).

Port-based VLANs aren't very efficient if you need to connect them to a router - you'd need a separate port for each VLAN. Instead you can use a single trunk port towards the router, connecting all VLANs at once. Of course, you have to configure the same VLANs in the same way on the router.

Port-based VLANs are exactly the thing you're talking about.

Configure each group's interfaces as Access and with a separate PVID (from 1-4094) per group. Make sure you keep Ingress filtering enabled (drops frames tagged for any other VLAN than the configured one).

I'm not familiar with those switches but the general console steps are

1. create VLANs (vlan 10)
2. associate access interface(s) with VLAN (interface ethernet g8 and switchport access vlan 10

To check whether the hosts show up in the intended VLAN, show bridge address-table should be helpful.

Port-based VLANs aren't very efficient if you need to connect them to a router - you'd need a separate port for each VLAN. Instead you can use a single trunk port towards the router, connecting all VLANs at once. Of course, you have to configure the same VLANs in the same way on the router.