Hi,
What you can do is, when you set up Service Catalogue, in Console, Catalogue Management, Service Catalogue, you can publish different services to different Roles/Groups. So, in the publishing tab, select which services to publish to your Self Service User Role for example, or the Procurement Role and users for that role will only see those services in the catalogue. You will need to rebuild the catalogue though for this to take effect.