Filter virtual groups from the Access Rights tab

Virtual groups, like the one computed by the Multi-tenant addon, are visible in the Access Rights tab, which is not the expected behavior, mainly because it's not possible to add permission to virtual users/groups in this screen.