When you select on any individual user, there should be an option to allow/deny dyn perms for select individuals since the current perm toggles are all-encompassing.