From console point of view the documentation would be much more descriptive if screenshots were added to procedures 10.11, 10.12, 10.20 and 10.21 of subsections "10.8.9.4.2. Configure User Role Assignment using the Management Console" and "10.8.9.4.4. Configure Group Role Assignment with the Management Console"