Use the security groups options in the portable TemplateOptions (1.8.x)