{
  "$id": "https://opendatafabric.org/schemas/auth/v1alpha1/PrincipalHandle",
  "$schema": "https://opendatafabric.org/schemas/resources/v1alpha1/meta/ResourceHandle",
  "description": "Link to a resolved identity that can act as a principal: `User`, `ServiceAccount`, or `Node`.",
  "type": "object",
  "required": [
    "type",
    "id",
    "name"
  ],
  "properties": {
    "type": {
      "type": "string",
      "format": "type-uri",
      "description": "Type URI of the principal."
    },
    "account": {
      "$ref": "https://opendatafabric.org/schemas/auth/v1alpha1/ResourceOwnerHandle",
      "description": "Account that owns the service account.",
      "unevaluatedProperties": false
    },
    "id": {
      "type": "string",
      "format": "resource-id",
      "description": "ID of the principal resource."
    },
    "did": {
      "type": "string",
      "format": "did",
      "description": "DID of the principal, if applicable."
    },
    "name": {
      "type": "string",
      "format": "resource-name",
      "description": "Name of the principal resource."
    }
  }
}