Group access rights are passed from parent group to subgroup: when a new a group is created, all of the group access rights that exist in the parent group are copied to the new group. If the rights on a parent group are modified after subgroups have been created, you can propagate the changes to the subgroup by selecting Apply changes to all sub Device Groups recursively on the Device Group Properties dialog.