Application Server OS Groups and Accounts
- Last UpdatedJun 25, 2022
- 3 minute read
For System Platform 2023, Application Server creates and uses the following user accounts, service accounts, and user groups.
|
Name |
Category |
Description |
|---|---|---|
|
aaConfigTools |
Group |
Provides permissions to users to connect to a Galaxy from the IDE. |
|
Performance Monitor Users |
Group |
Membership in the Performance Monitor Users group allows the Network Account to function without elevated privileges. See Network Account Membership, below, for more information. |
|
PSMS Administrators |
Group |
Membership in the PSMS Administrators group allows the Network Account to function without elevated privileges. See Network Account Membership, below, for more information. |
|
aaGalaxyOwner |
User Account |
This user account is the owner (dbo) of all Galaxy databases in your system. |
|
NT SERVICE\ aaPIM |
Windows Service Account |
This is the platform installation manager. It is responsible for installing platforms. It is added to the Administrators group as a service account. |
Network Account Membership
The Network Account is used for off-line communications between System Platform nodes. To support Application Server, it may have membership in some or all of the following OS Groups, with the requirements and limitations as described below. Note that membership in some of these groups is dependent on whether or not this is a new installation or an upgrade of an older version of System Platform.
|
Group Name |
Description |
|---|---|
|
Administrators |
The Network Account will be part of the Administrators group ONLY if you are upgrading
from System Platform 2017 Update 2 or prior release. If only Application Server is
installed, you can remove the Network Account from this group. |
|
Distributed COM Users |
The Network Account will be part of the Distributed COM Users group ONLY if you are upgrading from System Platform 2017 Update 2 or prior release. If only Application Server is installed, you can remove the Network Account from this group. |
|
Performance Monitor Users |
This is a new OS Group added for System Platform 2017 Update 3 and later releases. It allows the Network Account to function without elevated privileges. Do not remove this group, and do not remove the Network Account from this group. |
|
PSMS Administrators |
This is a new OS Group added for System Platform 2017 Update 3 and later releases. It allows the Network Account to function without elevated privileges. Do not remove this group, and do not remove the Network Account from this group. |