A company requires that only members of a specific Salesforce public group can access a particular CRM Analytics app. How should the consultant configure asset-level security to enforce this?