---
title: Granted identity
slug: '201'
canonical_url: https://docs.coveo.com/en/201/
collection: glossary
source_format: adoc
---
# Granted identity
A {doctitle} is a type of [security identity](https://docs.coveo.com/en/240/) that's automatically given to certain authenticated [users](https://docs.coveo.com/en/250/) by a [security identity provider](https://docs.coveo.com/en/242/).

A single security identity can have several granted identities, and a given granted identity can be associated with many security identities.
A granted identity is conceptually similar to a [group](https://docs.coveo.com/en/202/), except that most of the time, it's not possible for an external secured enterprise system to retrieve the complete list of users who would receive a certain granted identity.

Concrete examples of security identity models are available in the article [Security Identity Definition Examples](https://docs.coveo.com/en/42/).

> **Note**
>
> Granted identities were formerly referred to as _well-known groups._