Privileges: PRINCIPAL_MODIFY

After a group or user has been added to a Cohesity Cluster,
the referenced Idp principal can be used by the Cohesity Cluster.
In addition, this operation maps Cohesity roles with a group or user and
this mapping defines the privileges allowed on the Cohesity Cluster for the
group or user.
For example if an 'management' group is created on the Cohesity Cluster
for the Idp 'management' principal group and is associated with the
Cohesity 'View' role, all users in the referenced Idp
'management' principal group can log in to the Cohesity Dashboard but
will only have view-only privileges. These users cannot create new
Protection Jobs, Policies, Views, etc.

NOTE: Local Cohesity users and groups cannot be created by this operation.
Local Cohesity users or groups do not have an associated Idp
principals and are created directly in the default LOCAL domain.