In the lower section of the Users tab, in the app user's row, under Workspaces you'll see a plus button (+) and up to two workspace tags. If the app user can access three or more workspaces, you'll also see a tag with the number of additional workspaces: hover on the tag to see a popup with the workspaces' tags. Here you can add or remove access to workspaces: