Administrators who have an administrator group assigned to denied apps will only be issued apps that are not in this list.
If the denied app is a container app, a placeholder is created so that all other apps are displayed correctly.
It's easy to add denied apps to a group.
-
Activate the detail view by clicking on the Detail view button above or below the group list.

-
Click the Denied Apps tab in the View Groups.
-
Click on the Add button, at the bottom right.
-
A pop-up opens with a list of apps that are not yet in use.
-
Find the apps you want to add and highlight them.
-
Click on the Select button.