[Serusers] group checking before calling

[MeLaO]

Greetings all

We are trying to restrict call to users from the same group and
eventually allow someone from one group to call someone from other
group

For example

joe --> accounting
jane --> accounting
jack --> HR

I want joe to call jane but not jack but let jack call either joe or jane

I'd prefer to do this using radius since my auth is already working on radius

any clues?

Many thanks