Membership in a group for a user account can be directly or dynamically (using a query based on a tag) assigned.
Membership in a group for a service account can only be directly assigned.
Groupsin the left menu and click
Createdropdown in the upper right corner and select
Next (Service Accts).
Refer to the group create command for details and examples on how to create a group using the CLI.
Groups can be used by policies to grant access permissions to the group members.