Create following group hierarchy:

• parent
  • level1_child
    • level2_child

Create group permission to allow view the parent to myadmin and assign query-* roles.
Login as myadmin and see Groups. parent is visible while level1_child and level2_child are not.