On https://FQDN/users/new, none of the labels in the User tab is marked with red star or otherwise shown as mandatory. Only once Submit is hit, Username and Authorized by are marked with red and warning "can't be blank". OK, I fill in the Username and select INTERNAL, hit Submit. How I'm thrown back to the same form and nothing is marked with red. Clearly, the form wants me to fill the Password and Verify ... but it did not show those fields as mandatory when I selected INTERNAL, and it did not even show them as mandatory when I submitted the form.

While we are at it (but feel free to spin off to separate issue), if the Authorized by is mandatory and there is only one in the popup menu (INTERNAL), why is the user even given a choice to not select it?