In Order to make a Closed User Group Work, the Infra Team needs to disable the Content Cache on all Instances (Dispatcher, CDN ...). Therefore, find below a Sample Ticket that you can clone and adjust to your Requirements. Those would be the Domain your Website runs on, and the Content Path where the confidential Content is located below.