Hi,
Basically in business group under support roles (AD group) users can't access property tab in VM. Under machine info in items tabs.
Only someone who has business group manager role can see the Properties tab.
I do not think so this is correct. In my test environment Support manager role users can see properties tab as well.