You can add users from any identity source to one or more user groups in the internal database. To add users to a group in an external LDAP identity source you must use a tool appropriate for the directory.
You can organize users into user groups based on criteria such as geographic location or job title. You can also restrict which agents the user members can use to authenticate and the times that they can authenticate through the agent.
In the Security Console, go to the Home page.
Use Quick Search to find the user.
Select the user you want to add to a user group.
Under User Group Membership, click Add User to Group(s).
When prompted, search for a user group.
Select the user group or groups to which you want to add the user.