We have the same type of community you do and we do this all of the time. However the “Client” sees all spaces that are open to everyone that has a login. If you restrict all spaces except the top level, you could achieve this.
We have several spaces and subspaces we want all to see and potentially participate in.
Around the Water Cooler
Communities for All (and all the many subspaces underneath) –
This one is our horizontal space organization (meaning non-silos) These are typically cross organization HR managers, trainers, IT staff, project managers, enterprise projects, information sharing across the organization, etc.
Our vertical space organization lists all of the departments. These are typically restricted to the department projects with their invitees and collaboration but some open them up too.
Once a space is created for a department, they own the knobs and dials on creating subspaces, who gets access, etc.
I hope that helps.
Yes, you can create a group and set the permissions levels. The system will only show people what they have access to see, so you can control access at any level. Unless you have an automated way to identify them, managing them will be done manually.
I don't mind managing users into a group, but how do you restrict the spaces?
You need to go into the Space Permissions area and remove any of the groups that would have access from the default or inherited settings. Then just add the group of users that you want to have access to that space after you've removed all other variables. This will restrict the space to only those members that you've identified in the group.
Access the admin panel
Permissions -> Space Permissions
Enter the Space Name
Click "Customize this Space's Permissions" (might not be there if you've already customized this previously)
Click Remove Group from the default groups or inherited groups listed
Add Group -> Find the member group you created and put it there.
Hope this helps.