In Grouper 2.3+ there is support for privileges inheritance in the new UI.
Privileges
In order to see rules configuration, you need to be able to be an admin (stemAdmin) on a folder which is affected by the rule. If you want fewer people to be able to see the rule, you can set this in grouper.properties. Note, you dont need to be able to read attributes on the assigned (parent or ancestor folder) to be able to see the privilege inheritance. You also do not need privileges on rule attributes. If you want to require rules attributes privileges set this in the grouper-ui.properties.
# if this is true you dont even need to be able to uiV2.privilegeInheritanceDoesntRequireRulesPrivileges = true
Note, you dont need to be able to read/update rules configuration. If you
sfd