tr><th>Field</th><th>Type</th><th>Description</th><th>Required</th></tr></thead><tbody><tr id=Subject-user><td><code>user</code></td><td><code>string</code></td><td><p>The user name/ID that the subject represents.</p></td><td>No</td></tr><tr id=Subject-groups><td><code>groups</code></td><td><code>string</code></td><td><p>Groups the subject belongs to depending on the authentication mechanism,
&ldquo;groups&rdquo; are normally populated from JWT claim or client certificate.
The operator can define how it is 