HR Database Identity Lifecycle

Most identity information in CERN’s Authorization Service is read-only and synchronized from HR’s Foundation database. Account ownership and resource categories then support lifecycle decisions. External, guest and service identities mean that not every account can be described simply as one HR personnel record.

---

Topology

• Part of: identity-architecture
• Integrates: authorization-service-api
• Cites: cern-authorization-model