Privileges for Managing Access Groups and Federation Access Groups

An administrator must have the Manage Access Groups privilege on the root access group to add and remove access groups in Horizon Console. In a Cloud Pod Architecture environment, an administrator must have the Manage Access Groups privilege to add and remove federation access groups in Horizon Console. If the permission for a privilege is granted on a custom access group, the permission grants only read-only access to the Administrators page.