The Fusion capability in the ArcSight Platform supports user management, where you can add users, create roles, and assign roles. Recon adds a role and several permissions to the common set of roles and permissions in Fusion.
Section 14.0, Assigning Permissions for Recon
Section 15.0, Default Roles for Recon