User
Unique ID used for login.
Required only when creating a new user.
Uses role permissions as default, override with allow or deny as needed.
Control menu view permissions.
Control view and edit scope separately per feature.