Overview
Accounts can be used to access the enterprise API or the user interface (UI) using an email address and password. A Super Admin can create these accounts, or individuals can register for a new account through an unprotected endpoint. By default, new accounts do not have any roles assigned, which means they cannot perform any operations.
Accounts are considered a global resource, meaning they are not tied to a specific organization or tenant. However, they can gain access to specific operations within organizations, tenants, sub-tenants, or services if they are assigned roles that have the necessary permissions.
Unprotected Registering of new Accounts
By default, the Enterprise Stack allows anyone to access the unprotected /v1/account/register
endpoint to create a new
account. If you want to restrict this access, you can do so by using the feature manager in the Enterprise Stack to
disable the account-registration
feature.
Get Started
- Create Account - How to create a new account.