Tenant administrators create and manage custom groups and grant and manage user access rights to the vRealize Automation console. Add Identity StorevRealize Automation uses identity stores to authenticate users. Each tenant is associated with at least one identity store when it is created, but you can add new ones if necessary. Assign Roles to Identity Store Users or GroupsTenant administrators grant users access rights by assigning roles to users or groups. Create a Custom GroupTenant administrators can create custom groups by combining other custom groups, identity store groups, and individual identity store users. Manage User and Group EntitlementsYou can use user and group directory name search parameters to control user and group entitlements.