User accounts are managed separately in the user module. Each user account can be optionally linked to a person or organisation, which is referred to as \emph{identity}\footnote{By design, a person
(e.g. an employee) or an organisation (e.g. an institution) can therefore have multiple user accounts.}. Each user account has its own language, timezone and \myac{ui} theme setting.
User settings and password can be changed from a menu accessible in any \myac{ui} screen. Configurable password policies can be adjusted to meet common corporate guidelines.
An impending password expiration is displayed to the user and notified by email.
Permissions are pre-configured to constitute user roles appropriate for the trial site and can be assigned or revoked with instant effect at any time.