A user object is required of each person who needs to access the repository.
User objects are placed in groups, roles, and privilege lists to grant permissions. They can also have custom attributes attached to them to hold additional information.