If user management is activated, authentication is based on the user. To authenticate a user, you must generate an API key for the user, see chapter Configuration.
You must then specify the API key for each request as a header field (also called metadata in the gRPC context) with the name "ibahdapi-apikey".