# Users glossary

**Keycloak**
:   the service that CIIM uses to manage users and their permissions.

**A User** 
:   someone who has an account on your CIIM and can search and manage your data, depending on their permissions.

**A Group**
:   a way of managing what users can do in your CIIM. You can create a set of permissions to do things in CIIM and assign them to a Group.. Any number of users can then be added to that Group. 

**Permissions**
:   the ability to carry out specific actions with data in CIIM, such as viewing and updating records.