Application Control Overrides by Group?

Hi all,

In the situation of multiple groups; you can easily set up a Web Profile override; so that users in a certain 'special' group, i.e. Social Media Users, can still certain sites by overriding the current Web Filter Profile.

However, there doesn't seem to be a similar feature for Application Control?

To make things worst, Application control seems to block sites such as Facebook.com, even when accessing the site through a Web Browser. 

Besides creating a WHOLE new IP Policy, is there ANY possible way to achieve the above?