After creating a custom permissions group, based on a default permissions group, and assigning this new group to an existing application role, such as "Everyone (Change)" (in lieu of VI_4_ALLUSER, for example), the logged in user will see errors when clicking on a service catalog, for example:
"An exception has occurred while executing the form method F0_ctl00_Main_Main_ControlRef6_R0_ControlRef1_LinkContainer2_Method.
One or more errors occurred.
You are not allowed to run statement 'Webportal.VI_ITShop_ProductSelection.AccProductStatusForPerson'."
A similar error may be seen in other sections, for example when selecting "Pending Attestations".