3.1.4 Managing User Groups

User groups are seeded (available out-of-the-box) by the cloud service. Groups are mapped to roles using the cloud service by the same user that was created using IAM.

Administrators can also create new groups in IAM. After groups are created, they are synced from IAM to the cloud service. You can map the groups to roles using the subscribed cloud service.