Pulseri /identify now takes an optional audience_type (customer or employee) and /group takes customer_account or department. It applies only when Pulseri creates the person or group, and any key can send it. Customers belong to customer accounts and employees to departments. A secret key or signed request that names a group of the other type gets 422 group_audience_mismatch. An unsigned public key still gets 204 and the person is saved without the group. An unsigned call cannot set an email, even for a new person.
See the REST API guide.