I have several levels of group hierarchy configured to manage our firewalls. The top level is for the overall company, the second level is for corporate/production, and then there are third level child groups tied to location. I am creating my users at the top group level, so they can be managed centrally. I am able to create the authentication servers at the second level (production/corporate). However, it is not currently possible to set the actual authentication method at a child group level (You get an error message stating this can only be set at the top of the hierarchy). Unfortunately, it does not make sense to control the authentication methods at the overall company level as the ability to connect to a given authentication server is location dependent. Please allow each of these components (users, authentication servers, and authentication methods) to be managed at any group level in the hierarchy.