...
In the Add Authentication Service dialog, click the Remote Groups tab.
Click New (the plus icon). The Add Remote Group dialog opens.
In the Remote Group field, enter the name of a new remote users group for the SAML authentication service. The name must match the group name in the SAML server metadata. Here you map this group name to the NetMRI role(s) and device group(s).
Description: Enter a textual description for the remote group.
Click Save.
Click Add Role and select a role from the drop-down list. For more information, see Defining and Editing Roles.
In device groups: Select the checkboxes for the device groups you want to allow for the remote group. Note that the SysAdmin role applies to all device groups. Other roles allow the selection of individual device groups.
Click OK to complete the configuration.
When finished with the remote group configuration, click Save and then Close. Note that you can add multiple roles for the remote group.