MULTISITE: Public Primary Domain. Tightly Private Secondary Domains

I am new to MultiSite. Ideally I want the primary site to be visible to all. Any secondary site I want PRIVATE for pre-authorized users. Then I want to utilize functionality for COMMUNITIES plugin for team communications and project management. Guidance?