Allow hiding OG groups from selection in self-enrollment portal

[JoeTingley]

We use several groups of devices with both BYOD and DEP. It would be nice to be able to hide certain OG groups from the self enrollment portal.