Hi HomerJ,

One of the possibilities that could be causing the issues, is that the users are assigned to more than 1 group. HP only recommends that users be assigned to one group. When users are assigned to more than one group, the possibility exists that the permissions can be cross populated from one group to another. It is possible that the limited permissions of a lower permission group can take precedence over the higher permission group or the exact opposite with the higher granting the permissions and not limiting them. By assigning the users to only one group the possibilities of this cross population of permissions is removed.

I would recommend to assign the users to only one group (removing from all other groups and leave only in the desired group) and then create a test user so that you can verify that the permissions are assigned as desired. After assigning the users to groups and saving, then test the desired outcome with your test user.

I hope this helps,
Dan