Need help to configure SEP Firewall 12.1

Hi all

I need to enable the firewall policy in one group (5 pcs) only as the below configuration:

-This group can access any vlan

-No one can access this group without permission expect (3 IPs)

the most important thing that i want to deny (local hidden share)

any help

Thanks