When working with both user authentication and user authorization,
you need to understand how user names are treated by each system.
User Names and Authorization Identifiers
User names within the GemFire XD system are known as authorization identifiers. The authorization identifier is a string that represents the name of the user, if one was provided in the connection request.
Conversion of User Name to Authorization Identifier
If an external authentication system is used, the conversion of the user's name to an authorization identifier does not happen until after authentication has occurred but before user authorization. Imagine, for example, a user named Fred.
GemFire XD Member JVM Owner
The term JVM owner refers to the authorization identifier of the user who booted the GemFire XD member JVM. If you enable or plan to enable SQL authorization, controlling the identity of the JVM owner becomes important.