NetIQ Documentation: NetIQ Cloud Manager 2.3 Product Overview - Roles That Can Create User Accounts and User Groups

9.4 Roles That Can Create User Accounts and User Groups

The following roles have rights to create users and user groups. This includes manually entering information to create users or groups and importing users or groups from the LDAP authentication source.

Cloud Administrator: Can create both System and Organization users and groups.
Organization Manager: Can create Organization users and groups for assigned organizations. For example, a System user who is an Organization Manager for multiple organizations can create users in each of the assigned organizations. An Organization user who is an Organization Manager for his or her organization can create users only for that organization.