Problem:
The user would like to hide some user fields in the user profile in the backend.

Solution:
By default in Toolset, you can only choose the user roles where the user fields can be used. And you are right, these settings have been moved from the right sidebar to the field group section. Check this screenshot http://prntscr.com/wub8lr

If you need further control, you will have to use the Toolset Access plugin and you can then customize the options for each role in Toolset->Access Control->Types Fields(tab). Check this screenshot http://prntscr.com/wubp85