The local user the subject acts as, e.g. 'internal/user/openidm-admin'
OptionalrolesThe roles the subject gets, e.g. 'internal/role/openidm-admin'
The subject (the sub of the access token, e.g. an OAuth2 client id)
OptionaluserWhere the user's roles come from, e.g. 'authzRoles/*'
A static user mapping: it maps the
subof an access token (for example an OAuth2 client id) to a local IDM user and roles, so that a client that authenticates with a token acts as that user.