Suppose you get a call from one of your newly created users and he says "hey, I cannot login". The first thing you should check is whether he/she confirmed their access.
After you created the user, he/she will receive an activation link. If they did not click that link, it's normal that they don't have access.
You can easily check this, by going to your users screen and check the column "confirmed". (3)