TFS Security Group for Business UAT Testers

I have attempted to setup a security group only granting access to the test plan section so that I can assign business users to this group to execute test cases within TFS. However, when I set DENY on all other permissions users assigned to this new group cannot see the test plans. The purpose of this is to seperate these TFS users from my developers. Basically, I do not want them to have the ability to add/edit/delete code, delete user stories, bugs, or tasks. I have tried various configurations for the new group I created 'Testing Group' and the following is the current configuration: Bypass rules on work item updates Deny; Change process of team project. Deny; Create tag definition Deny; Create test runs Allow; Delete and restore work items Deny; Delete shared Analytics views Deny; Delete team project Deny; Delete test runs Deny; Edit project-level information Deny; Edit shared Analytics views Allow; Manage project properties Deny; Manage test configurations Allow; Manage test environments Allow; Permanently delete work items Deny; Rename team project Deny; Suppress notifications for work item updates Not set; Update project visibility Not set; View analytics Allow; View project-level information Allow; View test runs Allow; Users are unable to view the test plan to access the test cases and run unless I configure the 'testing group' as I have for my DEV team. However, that gives permission to the testers that I do not want them to have.