# Users glossary

Keycloak

the service that CIIM uses to manage users and their permissions.

A User

someone who has an account on your CIIM and can search and manage your data, depending on their permissions.

A Group

a way of managing what users can do in your CIIM. You can create a set of permissions to do things in CIIM and assign them to a Group.. Any number of users can then be added to that Group.

Permissions

the ability to carry out specific actions with data in CIIM, such as viewing and updating records.