Picturepark uses accounts and an Identity Server to identify users. Accounts control only whether the account holder may connect to Picturepark to access and edit that user's profile. Once connected, the Roles and Permission Sets of the account determine access to content and other parts of the system.
Pictureparks Identity Server handles the account registration. If a user has an identity server account, then that user can log in to other Picturepark systems. Their identity server account stays linked to their Picturepark account. The Administrator of the Picturepark can then choose whether or not to approve the user and what roles to assign.
Single users do not have permissions in Picturepark, but only through the role, they belong to.