Agent Installation Guide › Installing an Agent on Linux Systems › Least-Privileged User Requirements

Least-Privileged User Requirements

The agent installation for CA Enterprise Log Manager agents on Linux systems does not offer automatic user or user group creation. Use a root account to install the agent.

While you can run the agent as a root user, it is a better security practice to create a least-privileged account for the agent to use. You can give this user any account name you like, such as elmagentusr.

The agent installation adjusts the permissions on the existing user account you specify during installation. The folder permissions include the following:

• Permission 775 (rwxrwxr-x) over the CA Enterprise Log Manager Agent installation folder, its sub-directories, and files.
• As owner, the account has full permissions for all of the files and directories in the agent install directory.
• The user's primary group has full permissions to support an agent user change.

  Before switching to another user (for example, before switching to elmagentusr1 from elmagentusr), you can make elmagentusr1 part of elmagentusr primary group).

• Other accounts have read and execute permissions.
• The caelmupdatehandler executable has the setuid bit set.