When you look at the user access report, if "FT" is below the "**", the FT will override the "**" for that application only. If the "FT" appears above the "**", then the "**" overrides the FT. (At least, that's the way I think it works. You can test this yourself, or call Fed.)