Hi there!

What are the permissions differences that are assigned between "All Users" and "Group A"? Since the workbook has both of those groups and the user is in both of the groups, "Group A" must be granting explicit permission since removing it denies access. Tableau evaluates permissions first by looking at the user role (are you the admin? Have you been explicitly denied or allowed permission?) then checks out group membership (has a group you are a member of been explicitly denied or allowed access?).

In this instance, I suspect the two groups do not have matching permissions and All Users is likely NOT set to "deny", just "unspecified". If a user is explicitly denied access and another group explicitly allows access, the user will be denied access. However, using the "unspecified" permission tells the server to just go along with whatever other permissions are set for that "object". I'm suspecting that the user's permissions are set to "unspecified" and the group "all users" are also set to unspecified while "group A" is set to Allow. When the group with the "Allow" permissions are removed, nothing is granting the user explicit permissions and if nothing grants or denies access, the default is to deny access. If this isn't the case, screenshots of the permission screen would be extremely helpful in troubleshooting.

Interworks has a great article on this: https://www.interworks.com/blog/bfair/2015/09/29/tableau-server-permissions-demystified

Hope that helps!

Hmmm...it does look like "View" is set to explicitly allow on both groups...this IS odd! Let's try something: Navigate to the workbook and go to Permissions. Temporarily remove the "All FOF Publishers" group and then, in the "search for a user to view their permissions" box, type in a single user who experiences the issue. They will show up at the bottom of the screen showing you what permissions are assigned based on the current groups assigned to that workbook. From there, hover over the grey boxes to see how the user's permissions are being assigned. It will likely say something under "view" like "View: Denied <reason and rule>" and then use that information to address whatever rule is denying them access. If the users permissions still match but don't allow access, this may be a case for Tableau Technical Support: http://www.tableau.com/support/request

Try to delete the user and add the user back again

Have you tried turning on the "Connect" permissions for All Users?