Functional IDs

The Plixer Scrutinizer system relies on a number of generic functional accounts/IDs to control access to the environment’s different components and their respective functions.

The following table lists all default functional IDs used by a Plixer Scrutinizer installation:

System Component Account/ID Type Access Level Function
Operating system root Interactive Privileged Provides root access to the Plixer Scrutinizer OS, with unrestricted shell, SSH, and console access
plixer Interactive Non-privileged Primary user for the interactive scrut_util CLI utility and provides access to run all Plixer Scrutinizer processes and services
pgbouncer Non-interactive Non-privileged Used to manage remote database access between nodes, e.g. user/role access, load balancing, etc.
postgres Non-interactive Privileged Used for database operations during deployment
apache Non-interactive Privileged Primary HTTP services user
Database plixer Interactive Privileged Primary database role used by application processes for both local and remote access
postgres Non-interactive Privileged Used for local database access during deployment, upgrades, and scheduled pg_cron tasks
Web interface admin Interactive Privileged Provides full access to web interface management functions

Types:

  • Interactive - can be used to grant a user all privileges inherent to the ID
  • Non-interactive - reserved for internal use by the system and cannot be assigned to users

Access levels:

  • Privileged - has elevated permissions, such as superuser or system admin access
  • Non-privileged - granted only the access rights required for the ID’s intended function(s)