IAM Foundations

Account

The technical record — row, credentials, permissions — that implements one identity inside a single application.

An account lives inside one system and belongs to exactly one identity, though an identity can have many accounts across many systems. When an account has no identity behind it anymore — because the person left and the account was never removed — it’s called an orphan account.