You can create or modify a group, giving that group the capabilities associated with one or more predefined or customized roles.
When you use the useradmin group modify command to modify an existing group, whatever roles were previously assigned to that group are replaced with the roles you supply in the command.
group_name is the group that you want to create or to which you want to assign one or more roles. Group names are case insensitive and can be up to 256 characters.
custom_role is a customized role with capabilities assigned through the useradmin role add command.
root | admin | power | audit are roles predefined by Data ONTAP with default capabilities.
The following command gives the group “admin users” capabilities associated with the admin role, and removes any roles previously assigned to the admin_users group. useradmin group modify "admin users" -r admin
The roles and capabilities assigned to the group in question are listed in the output of this command.