This is typically why you separate authentication and authorization. In your case many authenticated users can be authorized to access a single identity.