Docs
chromia.com

ENTITY

main_auth_descriptor

The auth descriptor that manages an account.

It can only be substituted, not deleted. Every user account must have a main auth descriptor.

entity main_auth_descriptor {
 key account: account;
 key auth_descriptor: account_auth_descriptor;
}
key account: account;

the account of which this auth descriptor is the manager of

key auth_descriptor: account_auth_descriptor;

the auth descriptor that manages the account

Source