Baigh has the right idea.

A product rule (Rule-Application-Product, commonly abbreviated as RAP) with the ruleset will grab the access group if you include associated data.  You could also just package your application wizard for a more comprehensive product rule which includes the access groups ( and might remind you of some other access groups related to your application you could forget)

You can be even more selective and create a product rule for only one instance by just putting the pzinskey for the DATA-ADMIN-OPERATOR-ACCESSGROUP  into the individual instances to include.  Open your access group rule and use ACTION > View XML, then search the results for pzinskey.  You then use that value as the Key in a row of the individual instance to include.  If you have a few, you can also use the query function specifying DATA-ADMIN-OPERATOR-ACCESSGROUP in the select a class box.