Business role available but invisible to the user

Hi,

We need to give a user the membership of a business role that is linked with a group in ADS, but for some users (in a birthright role) this BR should not be visible from the web front end.

I tried just leaving the associated requestable resource in an IT Shop that the group of users are not members, but then a request (from a script) can not be placed.

Is there a way to do this?

Thanks in advance,

JM