Citrix Studio provides a feature called Limit Visibility, which allows administrators to hide specific published resources (apps or desktops) from chosen users or groups. This is the correct method to selectively exclude users from seeing or launching certain apps without removing them from the Delivery Group. Correct Approach: To prevent HR10 from seeing or accessing APP_A, the administrator should configure Limit Visibility so that only HR1-HR9 are allowed visibility for APP_A. This ensures: * The entire HR group still receives all published apps * Only HR10 is restricted from APP_A * The Delivery Group configuration remains intact Why the other options are incorrect: * A. Remove HR10 from the Delivery Group:This would remove HR10's access to all Delivery Group applications, not just APP_A. * C. Remove APP_A from the Delivery Group:This removes the app for everyone, not just HR10. * D. Limit visibility on APP_A to HR10:This would assign visibility only to HR10, the opposite of what is needed. Documentation References * Citrix Virtual Apps and Desktops # Application Publishing and Visibility * Citrix Studio # App Properties # "Limit Visibility" Feature * Citrix App Assignment Best Practices