Most everything is working.
I have one question, which will probably help everyone:
Is it true that to be managed through the /admin/ pages, groups need to be components of the acs-subsite application group?
For 4.6.2 and up the Main Site subsite application group is Registered Users.