Move the groups and roles discussion downstream.
Start a doc on tying down the instance.