Re: Site vs Org Groups

Yes, the groups are a great way to accomplish this. Do you use multiple Organizations? I would recommend doing it at the Org level. Unless you need to grant users access across multiple organizations but, I would think that is unlikely.