}

            @Override
            public String toDisplayString() {
                return "DOMAIN\\" + accountName;
            }

            @Override
            public String getAccountName() {
                return accountName;
            }

            @Override
            public String getDomainName() {
                return "DOMAIN";
            }

			AccessKey: claims.AccessKey,
			Claims:    claims.Map(),
			Groups:    groups,
		}

		// For authenticated users apply IAM policy.
		if !globalIAMSys.IsAllowed(policy.Args{
			AccountName:     cred.AccessKey,
			Groups:          cred.Groups,
			Action:          policy.PrometheusAdminAction,
			ConditionValues: getConditionValues(r, "", cred),
			IsOwner:         owner,
			Claims:          cred.Claims,