You can assign the user roles to users of the system, as listed in Table 7-1. All users must be a member of a predefined user group. The User Groups window, which lists the default local user groups, is shown in Figure 7-117. To create a user group, click  Access  User Groups Create User Group . The Create  User Group window opens. Enter a Group Name and select a Role for the new user. If the  group that is created is for remote authentication, select the  Enable LDAP for this group option (this option is available for LDAP authentication only; it is not required for the  Operations group). Note:  For more information about how to configure remote authentication, see 8.1.3,  “Security menu” on page 272. Figure 7-117 User Groups window Chapter 7. Using IBM FlashSystem 900  253 Creating a user group Table 7-1 Available user groups on the IBM FlashSystem 900 Name Role SecurityAdmin Users with this role can access all functions on the system, including managing  users, user groups, and user authentication.  Administrator Users with this role can access all functions on the system, except those  functions that deal with managing users, user groups, and authentication. Monitor Users with this role can view objects and system configuration; they cannot  configure, modify, or manage the system or its resources. Service Users with this role have monitor-role privileges and can view the system  information, begin the disk-discovery process, and include disks that are  excluded. This role is used by service personnel.