You can use Horizon Console to add federation access groups, move global entitlements to federation access groups, create custom roles to manage federation access groups, create administrators to manage federation access groups, and add permissions to federation access groups.
For information about using the lmvutil command-line interface to move a global entitlement to a federation access group, see Creating a Global Entitlement and Modifying a Global Entitlement.