Add user

Create a governed user identity with explicit capability attributes.