Identity and access control. * User id - generate a hash of a unique field such as email address * Group membership - providing access to features (ie. Role-based access) * Metadata - name, pseudonyms, avatars, etc.