Have you ever added users to a group and they do not have access to the rights of that group until they login again?
Instead of telling them to log out and login again (sounds like MS solution?) they can type:
newgrp name_of_a_group
For more details read
man newgrp