so if you, say, define a

view_member

permission on a group, you can find all groups that a user can view members