This kept me baffled for two hours! Hope this stops anyone else suffering the same bafflement.
I wanted to hide a module from a particular Manager Users lets call him Fred
So I created a user group called "Administrators"
For the module I want to hide I set "User group access" to Administrators
Fred is not in the Administrators group
But when I log in as Fred I can still see the module in the menu bar.
Solution: There has to be members of the "Administrators" user group for it to be effective.
As soon as I added the default admin to the "Administrators" group, the offending module disappeared from Fred’s menu bar.