VPN user group missing

[daleelad.cc]

Hey smarter than me ones.

Been following some articles to get my ipad connected to pfsense through ipsec.

https://blog.andregasser.net/how-to-configure-ipsec-vpn-on-pfsense-for-use-with-iphone-ipad-android-windows-and-linux/
https://doc.pfsense.org/index.php/IPsec_Road_Warrior/Mobile_Client_How-To

Both articles say to add the users I created in the IPsec xauth Dialin user group, but that group doesn't exist.  When I go to groups to manually create one I don't see anything that gives special permissions to ipsec for users.  Of course when I try to connect from my ipad I'm getting the following:

Feb 15 18:38:38 charon user 'username' cannot authenticate through IPsec since the required privileges are missing.
Feb 15 18:38:38 charon user 'username' could not authenticate.
Feb 15 18:38:38 charon 12[IKE] <con1|7>XAuth-SCRIPT failed for user 'username' with return status: -1.
Feb 15 18:38:38 charon 12[IKE] <con1|7>Could not authenticate with XAuth secrets for 'xx.xx.xx.xx' - 'username'
Feb 15 18:38:38 charon 12[IKE] <con1|7>XAuth authentication of 'username' failed
Feb 15 18:38:38 charon 12[ENC] <con1|7>generating TRANSACTION request 988978985 [ HASH CPS(X_STATUS) ]
Feb 15 18:38:38 charon 12[NET] <con1|7>sending packet: from xx.xx.xx.xx[4500] to yy.yy.yy.yy[5732] (76 bytes)
Feb 15 18:38:38 charon 12[NET] <con1|7>received packet: from yy.yy.yy.yy[5732] to xx.xx.xx.xx[4500] (76 bytes)
Feb 15 18:38:38 charon 12[ENC] <con1|7>parsed TRANSACTION response 988978985 [ HASH CPA(X_STATUS) ]
Feb 15 18:38:38 charon 12[IKE] <con1|7>destroying IKE_SA after failed XAuth authentication

Am I barking up the wrong tree by thinking there should be a pre-defined group for IPSEC Xauth dialin?

TIA for your help.</con1|7></con1|7></con1|7></con1|7></con1|7></con1|7></con1|7></con1|7>

[daleelad.cc]

Answered my own question.  Below groups are effective permissions, you can add the permission to that for IPSEC Xauth dialin.