If you are in LDAP Authentication mode you can't insert by hand a new user, he must make a first login to the application using LDAP credentials and then administrator could edit user data and associate authorities need to that user. In any other case the administrator can insert a new user in the datase and, after creation, he could associate authority to the user.