> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Actor Mappings

> Associate opaque actor IDs from JWT authentication with readable names and emails to support GDPR pseudonymization and erasure.

The **Actor Mappings** page in the Matcher module lets you associate opaque actor IDs (from JWT authentication) with human-readable information such as display name and email. This supports GDPR compliance by enabling pseudonymization and right-to-erasure operations directly from the console.

## Accessing the Actor Mappings page

***

Navigate to **Matcher > Settings > Actor Mappings** in the left sidebar.

<Note>
  A collapsible "What is an Actor Mapping?" helper is available at the top of the page explaining that an actor mapping associates an opaque actor ID with human-readable PII to support GDPR compliance.
</Note>

## Searching for an actor mapping

***

<Frame caption="Figure 1. Actor Mappings search page.">
  <img src="https://mintcdn.com/lerian-49cb71fc/d2MhAt_ujMsAUgqn/images/en/console/matcher/15-actor-mappings.jpg?fit=max&auto=format&n=d2MhAt_ujMsAUgqn&q=85&s=5967fab98eb83fb6132a959d3e703a38" alt="" width="1578" height="866" data-path="images/en/console/matcher/15-actor-mappings.jpg" />
</Frame>

The page uses a search-first pattern. Enter an **Actor ID** in the search field and click **Search** to look up a mapping.

* If a mapping exists, a result card appears with the actor's details.
* If no mapping is found, the page offers a **Create Mapping** button so you can register a new one immediately.

<Note>
  The search field can be pre-populated from a URL query parameter (e.g. when navigating from audit logs), allowing deep links directly to a specific actor mapping.
</Note>

## Result card

***

When a mapping is found, the result card displays:

| Field            | Description                                       |
| ---------------- | ------------------------------------------------- |
| **Actor ID**     | The opaque identifier from JWT authentication     |
| **Display Name** | The human-readable name, or an em-dash if not set |
| **Email**        | The email address, or an em-dash if not set       |
| **Created at**   | Date and time the mapping was created             |
| **Updated at**   | Date and time of the last update                  |

If the mapping has been pseudonymized, a yellow **Pseudonymized** badge appears on the card.

The card provides three action buttons: **Edit**, **Pseudonymize**, and **Delete**.

## Creating an actor mapping

***

Click the **New Mapping** button at the top of the page. A slide-over sheet opens with the following fields:

| Field            | Description                                                                                                                                                                                                                                                                                               |
| ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Actor ID**     | The opaque identifier from JWT authentication (e.g. `user:550e8400-e29b-41d4-a716-446655440000`). Maximum 255 characters — values exceeding this limit are rejected with a `400 Bad Request` validation error. Leading and trailing whitespace is automatically trimmed. Cannot be changed after creation |
| **Display Name** | The human-readable name (e.g. "John Doe"). Optional, but at least one of Display Name or Email is required                                                                                                                                                                                                |
| **Email**        | The email address (e.g. "[john.doe@example.com](mailto:john.doe@example.com)"). Optional, but at least one of Display Name or Email is required                                                                                                                                                           |

Click **Create Mapping** to save.

## Editing an actor mapping

***

Click the **Edit** button on the result card. The slide-over sheet opens with the current values pre-filled. The Actor ID field is locked — only the display name and email can be modified.

Click **Update Mapping** to apply changes.

## Pseudonymizing an actor mapping

***

Click the **Pseudonymize** button on the result card. A confirmation dialog explains that this action replaces the display name and email with `[REDACTED]` while preserving the actor ID link. This operation cannot be undone.

Confirm to proceed. After pseudonymization, the result card shows `[REDACTED]` values and a yellow **Pseudonymized** badge.

<Note>
  Pseudonymization supports GDPR Article 4(5) by making personal data no longer attributable to a specific individual without additional information, while keeping the structural link intact for reconciliation purposes.
</Note>

## Deleting an actor mapping

***

Click the **Delete** button on the result card. A confirmation dialog warns that this action permanently deletes the actor mapping (right-to-erasure) and is irreversible.

Confirm to proceed. The search state is cleared after deletion.

<Note>
  Deletion supports GDPR Article 17 (right to erasure) by completely removing the mapping between the opaque actor ID and any personal data.
</Note>
