Users are defined using user objects and, optionally, profile objects.

A user object is a definition that specifies the user’s name, default group, default profile, subject privileges, and several other attributes.

A profile is a template that defines a set of subject privileges and other attributes that can be applied to one or more users. The user authorization process can be streamlined by using profiles.