How to hide specific group activity to certain roles without making the group hidden and having to manually add members?