Use local machine and domain groups
Use this option when you want to choose a user group that is defined on your computer or in any accessible domain.
Use site server and domain groups
Use this option when you want to choose a user group that is defined on the site server computer or in any accessible domain.
Define role for specified users
Use this option when you want to define a common role for individual users, such as users who might belong to several groups, including users who have an account in a domain that is not accessible.
Role name
For the Use local machine and domain groups or Use site server and domain groups options, select the ellipsis button 
to display the Microsoft Select Group dialog, which allows you to select the Windows user group you want to assign to this
new role. The name of the role will be the same as the name of the selected user group.
For the Define role for specified users option, type the role name that the software will use to grant privileges for the
specified users.
An Active Directory group must have Security status and Global group scope to be able to work with Smart Engineering Manager.
Role description
Type a descriptive note about the role that you are creating. You can make notes that indicate the privileges assigned to the group.
Users
Allows you to enter the names of the individual users only when the Define role for specified users option is selected. If the role is based on a user group or domain, it is not possible to view the users belonging to that user group or domain, therefore this group box is disabled if either of the options Use local machine and domain groups or Use site server and domain groups is selected.
Add
When the Define role for specified users option is selected, allows you to add a row for typing a new user name. User names must be typed according to the Active Directory configuration using the syntax in one of the following options:
<User name>@<domain name>.<domain extension>, for example: ‘JSmith@anydomain.com'
The user's e-mail address, for example: 'John.Smith@MailServer.com'
Delete
When the Define role for specified users option is selected, allows you to delete the selected user.
Template
Select a pre-defined role template. Three role templates are delivered by default: None, Read-Only and Full Control. The None template grants no rights for the associated applications. The Read-Only template grants read-only rights to all of the rights for the associated applications. The Full Control template grants full control to all of the rights for the associated applications. You can edit individual rights after applying a role template.