We have configured role to hide specific ObjectCollections from the menu for certain users. (For example, hiding the ObjectCollection for "Person")

```xml
<authorization>
<name>users-read-ui</name>
<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#users</action>
<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#usersView</action>
<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#userDetails</action>
</authorization>
<authorization>
<name>user-read</name>
<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
<object>
<type>UserType</type>
</object>
</authorization>
<adminGuiConfiguration>
<objectCollectionViews>
<objectCollectionView>
<identifier>person-view</identifier>
<visibility>hidden</visibility>
<type>UserType</type>
</objectCollectionView>
</objectCollectionViews>
</adminGuiConfiguration>
``` Begin of the insertion

End of the insertion Begin of the deletion


End of the deletion When logging in with the target user, &quot;Person&quot; is correctly hidden from the menu as expected. However, if the user navigates to **Users &gt; All users** and uses the **Object Collection** dropdown in the search box, &quot;Person&quot; can still be selected and viewed.

<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/26247/content">