How is the user listed in the group? For example, as Jane Doe/ACME or in some other way? You mention groups are allowed to send. Is the user a direct or indirect member of more than one group (that is, other than the Email Relay Access Group)? If you add them individually are they then able to send mail? Did you issue a tell router update config after making your changes?