Collection and models permissions

Hello there!

I wanted to ask you for help, since I don't seem to get it yet.
We are automating a a workflow that allow our clients to login into our platform, which has metabase full app embedded within it.
I've been trying to setup permissions at collection levels, because we already arranged that every client will be tagged with a particular group, then we have this collection where only that group can interact.
The problem is that every model I saved in that collection, users cannot see them because they need access to the underlying database, but this cannot be possible due to privacy.
How should I configure this permissions so my clients can interact with this model, create new question from it but they cannot see any data from the underlying tables?
Thank you!

if you're using full app embed then you can write to help at metabase dot com as you have premium support