You could use an accordion control to allow expanding the category.
However, I see a couple of problems here:
If some options can be hidden, you need to handle partial selection. Otherwise, the rolled-up view would be misleading if only some of the categories were selected. Partial selection will likely be difficult to implement clearly (and it might be a technical headache, too, if it goes beyond of the capabilities of a standard UI element on your platform).
The hierarchical relationship of the items isn't completely clear. For example, if I only saw the "Products" category, would I realize that "shipping settings" was a product setting? This is not necessarily intuitive. Categorizing stuff can be difficult, and there is not always an obvious organization of all the features. This is not really a problem when all options are shown, but when some information is hidden, you rely on users being able to guess what a subcategory contains.
I would therefore favor not hiding the individual options. In security, clarity and precision are crucial. You need to know exactly what privileges you are giving to exactly what users. I think that makes it worth showing more information on the page, even if it gets a bit cluttered.