User management is part of the Admin section of the ERA Web Console.
ERA Web Console can have users of various Permission Sets. The user with the most permissions is the Administrator, with full rights and permissions. To ease usage in Active Directory, users from Domain Security Groups can be allowed to log into ERA. Such users can exist next to ERA Native Users, however, the Permission Sets are set for the Active Directory security group (instead of for individual users, as in the Native User case).