I'm looking for same thing to avoid all the security hassle but unfortunately there is no straight answer to this.
When this question was asked, Qlik replied with following link.
It's something new and if you could find a tutorial on this then probably you can or you'd have to do it the usual way by creating security roles in QMC
If your Value field is for Apps then I don;t see a problem, just add/delete the users to Custom properties you have already created.
Groups would be already assigned, rules will be created, you just need to update the users in QMC.