user_id first, followed by the user groups the user belongs to, directly or indirectly.
vault_attachment
string
5
Identifies the vault's current attachment. It changes when the vault is detached and attached again or restored; a client cache keyed by it is then stale.
The ACL mode of the vault.Values: ACLMODE_SIMPLE (0), ACLMODE_COMPONENT_BASED (1).
is_valid_external_user
bool
11
True if the logged-in user has a valid (well-formed GUID) external identity, e.g. from Microsoft Entra. The external ID itself is not sent to the client.
Used in fields
SessionData.vault_data -- The user's identity in the vault. Unset for a server-level session.