Overview

Accounts can be used to access the enterprise API or the user interface (UI) using an email address and password. A Super Admin can create these accounts, or individuals can register for a new account through an unprotected endpoint. By default, new accounts do not have any roles assigned, which means they cannot perform any operations.

Accounts are considered a global resource, meaning they are not tied to a specific organization or tenant. However, they can gain access to specific operations within organizations, tenants, sub-tenants, or services if they are assigned roles that have the necessary permissions.

Unprotected Registering of new Accounts

By default, the Enterprise Stack allows anyone to access the unprotected /v1/account/register endpoint to create a new account. If you want to restrict this access, you can do so by using the feature manager in the Enterprise Stack to disable the account-registration feature.

Get Started