You can create local users or database users from the Manage Users page. You can also add remote users or groups belonging to an authentication server. You can assign roles to these users, and based on the privileges of the roles, users can effectively manage the storage objects and data using Performance Manager, or view data in a database.
If you add a group from active directory, then all direct members and nested subgroups can authenticate to Performance Manager. If you add a group from OpenLDAP or other authentication services, then only direct members of that group can authenticate to Performance Manager.