Looking for the same documentation, any luck?

For that kind of functionality you need to create editordescriptors I guess.

Unfortunately I don't have a good answer how to hide an entire tabgroup but maybe you'll find some inspiration in Joel Abrahamssons blog: http://joelabrahamsson.com/hiding-episervers-standard-category-property/

I had a similar problem where the pagename should not be editable, and ended up with something like this.

[EditorDescriptorRegistration(TargetType = typeof(string))]
public class HidePageNameOnThatPageClass : EditorDescriptor
{
public override void ModifyMetadata(ExtendedMetadata metadata, IEnumerable<Attribute> attributes)
{
base.ModifyMetadata(metadata, attributes);

dynamic mayQuack = metadata;
var ownerContent = mayQuack.OwnerContent;
if (ownerContent is ThatPageClass && metadata.PropertyName == "icontent_name")
{
metadata.IsReadOnly = true;
}
}
}

Also after viewing joels post.. The documentation for episerver is really. really bad.