Candidate Start Groups

I would like to specify what groups are allowed to start an instance of a given process definition.