Agent Installation › Installing an Agent on AIX Systems › Least-Privileged User Requirements

Least-Privileged User Requirements

The agent installation for CA Enterprise Log Manager agents does not offer automatic user or user group creation. Use a root account to install the agent.

While you can run the agent as a root user, it is a better security practice to create a least-privileged account for the agent to use. You can give this user any account name you like, such as elmagentusr.

The agent installation adjusts the permissions on the existing user account you specify during installation. The folder permissions include the following:

• Permission 775 (rwxrwxr-x) over the CA Enterprise Log Manager Agent installation folder, its sub-directories, and files.
• As owner, the account has full permissions for all of the files and directories in the agent install directory.
• Other accounts have read and execute permissions.
• The caelmupdatehandler executable has the setuid bit set.