Membership in a group for a user account can be directly or dynamically (using a query based on a tag) assigned.
Membership in a group for a service account can only be directly assigned.
Groups in the left menu and click
Create dropdown in the upper right corner and select
Next (Service Accts).
Refer to the group create command for details and examples on how to create a group using the CLI.
Groups can be used by policies to grant access permissions to the group members.