...
The email is used as the user name for internal users. For other user types, it is taken from LDAP or SAML. Even if it is not the email.
The user's name is displayed in the top right-hand corner and can be freely selected.
Internal users can be locked out of the AAGM by setting the active flag to false.
The user type can be freely changed at the bottom with "Change User Type".
When changing the user type to LDAP or SAML, the current password is removed and the user authenticates from now on only against LDAP or SAML.
Change Password
The password can only be set for internal and api users.
...