===== BloxOne User Groups =====

ib-td-admin (ib-td-user is read-only)
  * Can't see IPAM/DHCP
  * Can't see DNS
  * Can't Licenses
  * Can't see DDI logging/reporting

ib-ddi-admin (ib-ddi-user is read-only)
  * Can't see Security policies
  * Can't Licenses
  * Can't see Security logging/reporting

ib-access-control-admin
  * Can only add/remove users (including Administrators)

ib-trusted-partner (read only)
  * Can't see "Administration > Downloads"
  * ''Can'' see "Administration > Dossier Usage"
  * Can't see "Administration > External Licences"
  * Can't see "Administration > Log Export"
  * Can't access Dossier in WebUI



user (read only)
  * Can't see "Administration > Downloads"
  * Can't see "Administration > Dossier Usage"
  * Can't see "Administration > External Licences"
  * ''Can'' see "Administration > Log Export"
  * ''Can'' see Dossier in WebUI
  * Can't see "License Entitlements"