The goal is to have a user gain the ability to add members to a group, but not view the current members through the Web Interface.
You can achieve this is you apply 2 different Access Templates, one to the Oorganizational Unit which contains the group and another Access Template to the Organizational Unit that contains users.
If Users and groups are in the same Organizational Unit, then you will need to create a Managed Unit and apply the respective Access Template to the Group object, and a Management Unit for User objects.
Create a new Access Template Add to group. This is to be applied to the Group.
Create a new Access Template List Users to be applied to the users accounts location(s) that will be added to the Group, and only grant access to list the account so as not to view the membership.
Disp: Documentation Insufficient Res: Resolved by Support Admin