Agent Installation Guide › Installing an Agent on Linux Systems › Least-Privileged User Requirements

Least-Privileged User Requirements

The agent installation for CA User Activity Reporting Module agents does not offer automatic user or user group creation. Use a root account to install the agent.

While you can run the agent as a root user, it is a better security practice to create a least-privileged account for the agent to use. You can give this user any account name you like, such as elmagentusr.

The agent installation adjusts the permissions on the existing user account you specify during installation. The folder permissions include the following:

• Permission 775 (rwxrwxr-x) over the CA User Activity Reporting Module Agent installation folder, its sub-directories, and files.
• As owner, the account has full permissions for all of the files and directories in the agent install directory.
• Other accounts have read and execute permissions.
• The caelmupdatehandler executable has the setuid bit set.