# README

## Overview

User & Role Management is a foundational administrative application for managing user accounts, role-based access control, and audit logging. It provides user lifecycle management, granular permission assignment through roles, and a comprehensive audit trail for compliance and troubleshooting.

Key features:

- **User Lifecycle Management**: Create, view, edit, activate, and deactivate user accounts with IDP integration
- **Role-Based Access Control**: Define roles with granular permissions and assign them to users
- **Self-Service Profile Management**: Users can view and update their own profile without admin privileges
- **Audit Logging**: Chronological record of all entity operations with field-level change tracking

## Industry Context

### Target Industry

Enterprise Administration and Identity Management (cross-industry)

### Domain Terminology

- **User**: An internal system user whose capabilities are determined by assigned roles
- **Role**: A named collection of permissions that can be assigned to users
- **Permission**: A scope-based key from a registered module that grants access to specific operations
- **Audit Log**: An immutable record of create and update operations with field-level change details
- **Lifecycle**: The state transitions of users and roles (ACTIVE ↔ INACTIVE)
- **IDP (Identity Provider)**: External authentication system provisioned during user creation
