I'm not sure if this is really expedient because granting an app-access and applying a vertical/horizontal data-control against the data-set are different things and should it be - as parts of a chain of security measurements. Mixing them will rather increase the complexity and any risks and not leading to less work or an easy workflow.
In many scenarios the use of a section access don't need much management efforts because by using (nested) user-groups instead of single users it's not needed to specify each one explicitly - respectively the work is outsourced to the IT / HR department or whatever management-level should be responsible. Such approach may not need any extra work else the users could inherit the rights from their team/department from the company start and by any moving within the company to their deactivation by ending the job.
