Comes down to how you want people to access them. VLANs and Firewall rules are for restricting access. So that’s how you should approach this.

From what I can tell, you have switches with Layer 2 capability, which doesn’t help much… You’d want Layer 3 capability formost to try and seperate things in this network properly, and pass VLANs how you’d need for Firewall rules.

So how I would set them up? This is the definition of a mesh network, and not much can be segregated, due to the capability of your switches…