Lenovo ThinkVantage (Hardware Password Manager Deployment Guide) - Manual (Page 27)

5. Click OK.
To assign permissions to a group that can be authenticated through the new authentication, do the following:
1. In the User's tool, click + on the toolbar or right-click Group Permissions, and then click New group
permission.
2. Enter a name for the group permission.
3. Select the authentication created previously from the AD Authentication drop-down list.
4. Either find the appropriate group in the tree view or type the name of the group in the AD group field
and click Find.
5. Click >> to add the appropriate group to the Targeted AD groups list.
6. Repeat step 5 as needed.
7. Select the role(s) to be assigned to this group permission.
8. Click Save.
Now when users log in to the console they need to select the appropriate authentication and enter their
credentials. The level of access granted will be determined by the scopes and roles you have just defined.
Chapter 3 . Managing Hardware Password Manager devices with ThinkManagement Console 19