Restricting Commands with Access Rules/Access Templates?

Greetings!

So I was looking for some feedback/suggestions on how to implement the following scenario: I have a command on the web interface that is associated with groups, however, I only ever want this command to show if the user is NOT a member of said group. I had originally looked at the VBSFilter, but I am not sure on how to pass user and group information to said filter in the code to return true/false.

Any idea if this is possible to do with an Access Rule? I know you can do a condition with user groups, but that looks like it requires a "hard coded value" and not something that is generated/dynamic. 

Or is this not possible?

Thank you kindly for any feedback!! Slight smile