Security identity

A Security identity is a unique entity that can be used to define a permission on a secured item. Thanks to this permission, authenticated users who are allowed to access this item can see it in its original repository or in their Coveo search results. A security identity belongs to a specific security identity provider.

A security identity is composed of a name, a type (user, group, or virtual group), and an optional field called AdditionalInfo.

AdditionalInfo can be used to enrich a security identity with custom information to make it unique. For example, if two users have the same name, AdditionalInfo lets you specify more information about each user, like their employee ID.

A security identity typically has at least one relationship with another identity of the same security provider (a child/parent relationship) and sometimes with identities from other security providers (an alias relationship).

For more information on sources that index permissions and how Coveo handles these permissions, see Coveo management of security identities and item permissions.