Group management?

With the Google Login realm selected, I can't seem to figure out how to add users to groups. The "authenticated" group works fine, but I'd like to have, e.g., an admin group and a developer group. Is this something that Jenkins hands off entirely to the realm? If so, is there a way to configure it with Google Login?