A user account allows a user to log in to Cloud Foundry and perform certain operations that are limited by the roles assigned to them by the Cloud Foundry Administrator.
The user accounts can be created at an Org or Space level, based on the role they play in the organization. The same user can administer the Org and Space, or can be restricted to pushing applications to a given Space or Spaces.
Additionally, a user can span across multiple spaces in an Org, and under each Space, they can be controlled by the Space role.