IN the instructions for adding users through the console, it says to create a Product profile if limiting by groups. Why do I need to create a custom resource? it is not mentioned anywhere on the Security group creation page??