return "", errNoSuchUser
			}
		}
		return res.NormDN, nil
	default:
		return "", errIAMActionNotAllowed
	}
}

// guessUserProvider - guesses the user provider based on the access key and claims.
func guessUserProvider(credentials auth.Credentials) string {
	if !credentials.IsServiceAccount() && !credentials.IsTemp() {
		return madmin.BuiltinProvider // regular users are always internal
	}

		return
	}

	var expiration *time.Time
	if !targetCred.Expiration.IsZero() && !targetCred.Expiration.Equal(timeSentinel) {
		expiration = &targetCred.Expiration
	}

	userProvider := guessUserProvider(targetCred)

	infoResp := madmin.InfoAccessKeyResp{
		AccessKey: accessKey,
		InfoServiceAccountResp: madmin.InfoServiceAccountResp{
			ParentUser:    targetCred.ParentUser,