Some features of CloudSploit are considered "global" and can be seen by all members of the account, regardless of group. These include: third-party integrations (e.g. Slack, PagerDuty) and user membership (i.e. user A can see that user B is a member of the account). For these reasons, groups are not designed to be fully isolated containers. If you require complete isolation of resources, please consider our "master billing" account mode, which allows for multiple, fully isolated CloudSploit accounts to be setup under the same billing account.