identity Graph Node

Root Set Name: identities

Fields

createdAt	DateTimeOffsetValue
description	IdentityPropertiesFieldValue
email	IdentityPropertiesFieldValue
identityId	UuidValue
lastActiveAt	DateTimeOffsetValue
lastModified	DateTimeOffsetValue
name	IdentityPropertiesFieldValue
phone	IdentityPropertiesFieldValue
roles	ArrayValue
suspendedAt	DateTimeOffsetValue
systemClient	IdentityPropertiesFieldValue
type	EnumValue

Edges

Name	Type	Cardinality
activityLogs	activityLog	Many
cancelledOrders	order	Many
checkpoints	mutationSet	Many
confirmedOrders	order	Many
createdDeliveries	delivery	Many
createdOrders	order	Many
finalizedDeliveries	delivery	Many

What is an Identity?

An identity represents an authentication entity in Hantera. There are three types:

• Principal (type: "principal") - Human users
• Client (type: "client") - OAuth applications and integrations
• System (type: "system") - Internal system processes

TIP

Identities are read-only in the Graph API. To create or modify identities, use the IAM REST API.

Properties Object

The properties field exposes a limited set of identity properties:

• name - Display name
• email - Email address (unique for principals)
• phone - Phone number

Note: Identities may have additional properties in the database, but only these three are exposed via the Graph API.

Common Query Patterns

Query All Principals

[ { "edge": "identities", "filter": "type == 'principal'", "node": { "fields": ["identityId", "type", "properties", "createdAt"] } } ]

Returns all human identities in the system.

Find Identity by Email

[ { "edge": "identities", "filter": "type == 'principal' and properties.email == 'user@example.com'", "node": { "fields": ["identityId", "properties"] } } ]

Email addresses are unique across all principals.

Query Clients

[ { "edge": "identities", "filter": "type == 'client'", "node": { "fields": ["identityId", "properties"] } } ]

Returns OAuth client identities (system clients are excluded).

Managing Identities

Identity management (create, update, delete, suspend, password reset) is done via the IAM REST API, not through Graph queries.

See also:

• IAM Domain Model - Understanding identity management
• IAM Principals - Managing identity principals