Files
threshold/website/content/docs/concepts/domain-model/users.mdx
T

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

60 lines
2.0 KiB
Plaintext
Raw Normal View History

2020-07-27 10:59:08 -07:00
---
layout: docs
page_title: User resource
description: >-
Learn how the user resource identifies a person or entity for access control purposes. Understand how to assign groups and roles so users inherit permissions.
2020-07-27 10:59:08 -07:00
---
# Users
2020-07-27 10:59:08 -07:00
A user is a resource
that represents an individual person or entity
for the purposes of access control.
A user can be associated with zero or more [accounts][].
2020-10-12 14:52:46 -04:00
A user authenticates to Boundary through an associated account
and must be associated with at least one account before they can access Boundary.
2020-10-12 14:52:46 -04:00
A user is also a principal
which allows it to be assigned to [roles][].
A user receives all the [permissions][]
of the roles assigned directly to the user
and all the permissions of roles assigned to [groups][] the user is in.
Users can be defined at either a [Global][] or [Organization][] [scope][].
2020-10-12 16:19:13 -04:00
A user can only be associated with accounts from an [auth method][]
configured in the same scope.
## Attributes
A user has the following configurable attributes:
- `name` - (optional)
If set, the `name` must be unique within the user's immediate parent [scope][].
- `description` - (optional)
## Referenced by
- [Account][]
- [Global][]
- [Group][]
- [Organization][]
- [Role][]
2023-01-20 18:17:34 -05:00
[account]: /boundary/docs/concepts/domain-model/accounts
[accounts]: /boundary/docs/concepts/domain-model/accounts
[auth method]: /boundary/docs/concepts/domain-model/auth-methods
[global]: /boundary/docs/concepts/domain-model/scopes#global
[group]: /boundary/docs/concepts/domain-model/groups
[groups]: /boundary/docs/concepts/domain-model/groups
[organization]: /boundary/docs/concepts/domain-model/scopes#organizations
[permissions]: /boundary/docs/concepts/security/permissions
[role]: /boundary/docs/concepts/domain-model/roles
[roles]: /boundary/docs/concepts/domain-model/roles
[scope]: /boundary/docs/concepts/domain-model/scopes
## Service API docs
The following services are relevant to this resource:
2023-01-20 18:17:34 -05:00
- [User Service](/boundary/api-docs/user-service)