Groups in any Domain can be created by the Server Administrator if the administrator Account has the Can Modify All Accounts And Domain Settings access right.
A Domain Administrator can create, remove, and rename groups only if the CanCreateGroups access right is granted to the administrator account.
To create a new group, type a new group name into the field on the right side of the Create Group button. The selected Group name should meet the Domain Object name restrictions.
Click the Create Group button. When a new group is created, its name appears in the list. The Server automatically displays the Settings page for the new group.