Managing system access for tenant users

You can grant users access to a tenant account either by importing users and groups from a federated identity source, or by creating local users and groups. If you import users and groups, you must grant the federated groups appropriate tenant management permissions.