This should have already been implement in my opinion.
Groups need privacy settings for the group owner. An example would be for them to decide who can/can not post to the stream. Facebook follows a similar format. The admin decides who does/does not post to the stream. Same implementation you have done with user profiles as well.
Thanks,
James