Hi @marmaria! Welcome to the community.
I don't think I quite understand your questions. 
Are you wanting to restrict access to certain resources via permission groups in the UI?
Secondly, do you want to know what the logs will show whenever there are changes to these access rules? I'm not sure what metadata is referring to, if that is the case.
In general, it would be helpful to get additional details about what specific actions you're taking within Retool. Screenshots are always welcome, as well!