# Access

Access to **LIBSAFE** is done with a password-authenticated user. Users may be defined locally in **LIBSAFE** and/or defined in **LIBSAFE,** referencing users of an Active Directory / LDAP. It is not possible to utilize users registered only externally, since in order to comply with the OAIS standard, **LIBSAFE** must guarantee the perpetual registration of the users that have generated each action in the system, as well as to control the access to the contents and functionality of the application. This is the reason why **LIBSAFE** can neither rely on an identification system with no controlled rules and which does not guarantee a perfect history, nor run an automated process for user registration that does not consider permission association individually.

_A user in LIBSAFE cannot be removed, although it can be disabled._

Users must be assigned to user groups; these user groups will have **LIBSAFE** permissions assigned to them, which will determine the change of access to the different parts of the application. The concept is similar, though not equal, to groups and profiles in other systems, as may be the Windows operating system.
