You need to create roles for your groups of users, and then set the permissions for each app to that role (or groups of roles)
By default apps are normally created with users having read access, so you would also need to remove this.
If my comment helps, please give it a thumbs up!
