Metrics Management does not support inheritance through groups. If an action on a object is undefined for a group, the group does not inherit security settings from the user that published the group. An undefined action is denied. To temporarily deny an action for a group, make the action undefined, and then define the setting later.