keithkelly The solution recommended by CarolineS is the best practice. It's so much easier to create an Internal category that only employees have access to.
I did some research, you can only create roles via the API for each board. You will need to set individual permissions manually in the admin since it's not supported via API.
If you need to stay on the same path with your structure, you will need to set the permissions manually and create an "Employee" role (and set permissions for the role) in each [internal] board.
All you will need to set for the Employee role permissions is to GRANT "See forums" and make sure it is set to DENY in the [internal] board default permissions.
We will capture this feedback for future consideration when we look at improving roles and permissions in the future.
