I would like to be able to assign what services can be used via a group. This way if you only want your users using IMAP instead of pop three you can turn the pop three off in the group and be done with it.

What I envision is create the group as you do now, disable the unneeded services and then add your users to the group. Instead of having to not allowing users to connect to services for each user.