Privileges for Managing Access Groups

An administrator must have the Manage Access Groups privilege on the root access group to add and remove access groups in Horizon Console.