When all of the users are centralized in a directory, their user IDs are different by default. This allows the SAN to differentiate each client by their user ID and to determine appropriate permissions.