We found a "work around", but it requires a new migration. We went to the app, removed all of the flwos, re-added and migrated, and it works. For us, the pattern was the users who were able to run them had access prior to the last migration.
REALLY hope MS fixes this. We look bad when things don't work.