App availability control at user/group level