Although subgroups inherit all existing policies of the parent group, you must separately add users and devices to the subgroup.
Views:

Although subgroups inherit all existing policies of the parent group, you must separately add users and devices to the subgroup.