Agent users and actions
The following table shows various possible configurations of agents and the users they run as.
| Tool Runs As | Password | Result |
| HP ITO Account or Local System | Not specified | No login for the user. The tool will always succeed and it will run as the agent user. |
| HP ITO account | Specified | Login will be done for the user. The tool will succeed only if the user exists and the password is correct. Because the HP ITO account does not exist on a Local System agent, the tool will fail there. |
| Local System | Specified | The Local System account does not have a password, so a login with password is not possible. The tool will fail. |
| $AGENT_USER | Not specified | Succeeds on both an HP ITO account agent and a Local System agent. It will run as the agent user. |
Operator interaction with tools
- If an operator does not modify the user of a tool, the tool runs with the user configured by the administrator.
- An operator cannot modify the user of a tool without specifying a password.
- An operator can only run a tool with a changed login if he knows the user name and password of a user who is allowed to run the tools on the managed node. For example, he can change a tool which has been configured to run as Local System account to run as HP ITO account if he knows the appropriate password.
- An operator cannot change the user to $AGENT_USER.