A user with access to QLARM. A user may be a defined recipient, but not necessarily. Users are defined in Azure AD (Active Directory). A customer Azure AD can be used, or a QLARM AD will be provided if the customer does not have access to one.
Users are assigned roles.
An administrator can define the available actions for a role.