Each ability has it's own permission node that follows this format
So, for example, for AirBlast, it would be 'bending.ability.airblast'
If you use Group Manager, you can negate perm nodes for grounds by adding a hyphen, example: '-bending.ability.airblast'