If you want to remove a permission from a group, use "oxide.revoke group groupname permission", replacing groupname and permission as needed.