Application Controll does not work with User Network Objects

Hello,

does someone know if the application controll should work with User network Objects?
I've installed the SAA on my client and if I enable automatic user creation on the UTM my user is created after checking the password against my AD.
But if I use the created user network object in an application controll rule it does not work.

Is there any way to make a application controll rule based on users or groups?

Kind regards
Stefan

edit: We are running a webproxy with https-scanning.