We have an app that currently has two sets of users: 1 can access all three tabs of the app and 1 can access only two tabs of the app. Currently we are controlling access to the app through two Active Directory groups. The business owner of the app would like to change the access such that the two tabs are open to the entire enterprise but access to the third tab is restricted as before. I thought it would a simple matter of changing the app in the management console to distribute to All Users but leave the section access to the third tab in place. After making this change, only those in the AD group have access. We did remove the reference to the first AD group from the app, then added a line using an asterisk thinking it would pick up all users. Still no change. Does anyone have any advice?