App Authorization by Individual as well as by Group?

[roedea]

If I have an app that should be able to be accessed by a group except a user or two in that group, how can I do this? Similarly, if an app can be accessed by a group plus I'd like one additional individual who is not in that group to have access to the app, how can I do this? It seems that I can't control access by user, only by group. But if I have to make many miscellaneous groups to handle individual exceptions, it seems that this can get unruly. Any ideas? Thanks.

[Johnny Major]

If I have an app that should be able to be accessed by a group except a user or two in that group, how can I do this?

Similarly, if an app can be accessed by a group plus I'd like one additional individual who is not in that group to have access to the app, how can I do this?

For both scenarios, I believe you should use the Allowed Apps and Disallowed Apps features directly on the user.

• Allowed Apps and Disallowed Apps - these tabs only appear when Settings is configured to allow exceptions to group authority. Apps specified here are explicitly disallowed or allowed for the user, regardless of their group membership. Managing group authority exceptions can be cumbersome, so you should use this feature sparingly so as not to diminish the meaning of the defined groups. In other words, if you find yourself having to make many exceptions to group authority, it may be worth simply setting up new groups.

More information can be found in the guide