Symantec Endpoint protection 12.1.5

Hi,

HOW DO WE DO FOLLOWING THING IN SEP 12.1.5.

Application and device control in detail ( can we create multiple group in SEPM...??), if yes please help me how we can do that.

Grouping of clients, adding/removing clients from a group 

Setting up of policies according to the requirement

Thanks