Glossary

actor

For the definition, see the terminology section Actor.

app

For the definition, see the terminology section App.

app developer

A person, company, or organization that develops software that is used with a UCS system and that integrates with the Guardian. This includes Univention App Center applications, as well as third-party service providers using a service connector.

app infrastructure maintainer

A person who installs and manages UCS systems.

authentication

Confirmation of a user’s identity. The Guardian doesn’t handle authentication.

authorization

Confirmation of the access that a user has. The Guardian’s job is to handle authorization after a user is authenticated.

Authorization API

A REST interface that allows an app to authorize an actor to use features of the app.

capability

For the definition, see the terminology section Capability.

condition

For the definition, see the terminology section Condition.

context

For the definition, see the terminology section Context.

guardian administrator

A user with the guardian:builtin:super-admin role, who can manage all aspects of the Guardian and any app using the Guardian, including capabilities for users and groups.

guardian app administrator

A user with a role ending in app-admin, who can manage most aspects of an app, including which capabilities a user has for that app.

Management API

A REST interface that allows an app or guardian administrator to manage the Guardian.

Management UI

A limited web interface that allows an guardian administrator or guardian app administrator to manage the Guardian.

namespace

For the definition, see the terminology section Namespace.

permission

For the definition, see the terminology section Permission.

role

For the definition, see the terminology section Role.

target

For the definition, see the terminology section Actor.