in AppXtender Web v16.3, if a user logging in receives an error message stating that they have not permissions to an application then the user will need to be deleted and re-added.

Note, if the AX audit trail then please create a support case.