Back to basics.. limited console access

SCOM 2012 R2

To grant access to only select teams via role based security groups:

1. Create my set of security groups for the different teams; ie SQL, AppSvcs, etc.
2. Start with SQL: Create a new SQL Operator User Role.
3. Add the new role based security group to User role members.
4. Group Scope: Databases and all SQL.
5. Tasks: Only tasks explicitly.. Everything SQL related.
6. Dashboards & Views: MS SQL Server, Databases, Performance, SQL agent.
7. Task Pane: Application Summary Dashboard.
8. Save.

9. Launch the SCOM web console and log in as a member of the RBA security group. This user doesn't have any additional special access.

I notice I can still see everything in the Monitoring list. What am I missing?

Any responses appreciated.