Cisco Cisco Workload Automation 6.3 Installation Guide
31
Installation Prerequisites
User Security Requirements
User Security Requirements
The security requirements for CWA vary according to the task the user account needs to accomplish. The user account
that installs the components of CWA requires different security rights than an account that runs CWA as a service. The
user account that will operate CWA has its own security needs. The following points and the table below illustrate security
rights differences between the various CWA components.
that installs the components of CWA requires different security rights than an account that runs CWA as a service. The
user account that will operate CWA has its own security needs. The following points and the table below illustrate security
rights differences between the various CWA components.
CWA
Component
Component
Installation Rights
Service Rights
User Rights
Windows Master
Local Administrator
Able to access
COM objects
COM objects
Local Administrator or Local
System
System
Logon as a service
Able to access COM objects
Local Administrator or Local System
Unix Master
Must be installed
under a user
created by root
under a user
created by root
Access rights to
JVM
JVM
Access rights to JVM
User account must be created by
root
root
Access rights to JVM
Windows Agent
Local Administrator
Able to access COM
objects
Able to access COM
objects
Local System or if running under
Domain\User must have local
administrator rights including:
Domain\User must have local
administrator rights including:
Logon as a batch job
Logon as a service
Act as part of the operating system
Replace a process level token
Able to access COM objects
On machines running Windows 2003,
you also need the following privileges:
you also need the following privileges:
Bypass traverse checking
Adjust memory quotas for the
process
process
User must be root or created by
root
root
Access rights to JVM
Local System or if running under
Domain\User must have local
administrator rights including:
Domain\User must have local
administrator rights including:
Logon as a batch job
Logon as a service
Act as part of the operating
system
system
Replace a process level token
User must be root or created by
root
root
Access rights to JVM
Ability to change to the runtime
user
user
Unix Agent
Logon as root
N/A
N/A
Client Manager
Local Administrator
Able to access
COM objects
COM objects
N/A
General user rights
Java Client
Local Administrator
N/A
General user rights