At the moment Foreman's HostgroupsController has no "show" action. This means that if someone has no write access to hostgroups, they can view the list of hostgroups, but they cannot view any of the settings in a hostgroup. Being able to see the settings would be useful to help pick a proper hostgroup for creating new hosts.