If you have created a user group for internal use only, there needs to be an option (checkbox or rule) to turn off visibility to the end user (portal view), yet still allow visibility and use for internal (platform user) agents to assign or CC that specific group.