Identities

Identity is usually the Unix account name when the details of an account have been compiled into the policy, or user_u otherwise - a login program issue that can be changed in the libraries

Identity controls the available roles which controls the available domains