A discrete user identity is called a persona. A persona is more than just the identification of a particular user; it can also be the identity of a group or role or even an identity associated with a system privilege. Persona objects can be compound identities; a user often is a member of various groups or should have access to resources according to the roles the user holds in an organization. Typically, the user authority adds these identities as subpersonae.