Provide a method for assigning group visibility independent of user roles.

We want to be able to show our clients their device groups in LM, but that currently requires making a new role for every client user due to group visibility only being able to be modified on the r...