SunScreen contains two aspects of user identification: authorized user (as defined in the authuser database) and proxy user (as defined in the proxyuser database). In addition, there is an alias, administrative users, for authorized users. Administrative users are functionally identical to authorized users and their role is defined by the access rules.