there should be a field under kubevirt's .spec.configuration, named "aggregateRoles", with a default value of "true" (this is the current behaviour), and when set to "false", the kubevirt roles are not being aggregated to the default admin/edit/view groups.