Tenant administrators create business groups and custom groups, and grant user access rights to the vRealize Automation console.