ok got it, <identity> is the identity the settings <rights> etc are for. Confused by the original  : notation (symbols are literal).