Human-readable display name.
Normalized unique login address.
New accounts start enabled.
Stable user identifier assigned at provisioning.
Argon2id credential hash; never leaves the server.
Initial account preferences; null fields mean not yet chosen.
Persistence input for creating one independently provisioned user.