Currently in IPAM "Manage Subnets & IP Addresses", when you create a "hide" role, the users can still view all levels of groups. Only the supernets and subnets are hidden. This is not desirable. Hidden groups should be invisible.