Right now there is no way to restrict access to ESRI applications in AGOL organization administration for select users. Its either the app is on for all or off for all. This is not sufficient.
Example: I only want Joe to access the Business Analyst tool in AGOL but not Sally. Not an individual created app built but rather the product itself...Business Analyst for example.
This is very problematic as not all users need access to all apps so I should be able to control this. Actually quite surprised this doesn't exist already. Need more granular level control.
Screenshot of settings:
