Add application access to user groups

Hi

Can you please consider adding the "Application Access" options available when editing a user to User Groups as well?

It would be much easier to manage application access at a group level rather than for each user individually.

Also, precedence should be set to ALLOW. In other words, if a user is a member of two groups, one which has an application enabled and one which has the application disabled, then it should be enabled.

Or, preferably, add an option somewhere to let the administrator choose if ALLOW takes precedence or DENY takes precedence.