If this is limited to users, it shouldn't use a generic `entity` variable name