Object. It might be helpful to compare identity and principal objects to familiar concepts like user and group accounts.

• 将标识和主体对象同用户与组帐户这样常见的概念进行比较,可能会有所帮助。