Installer Accounts

The following installer accounts will be used during the TIBCO iProcess Engine installation:

• IPEINSTALL
• IPEADMIN
• IPESERVICE

IPEINSTALL

IPEINSTALL is a Windows user account used to install TIBCO iProcess Engine.

• The IPEINSTALL user account must be a member of the Administrators group on the computer where you are installing iProcess Engine. If you use an account that does not meet this requirement, the installer will immediately exit with an error. See The Installer Exits Because You Are Not a Local Administrator for details.
• The IPEINSTALL user account also determines which Windows accounts you will be able to use as the IPEADMIN and IPESERVICE users:
— If you perform a Basic installation, the IPEINSTALL user account will also be used as the IPEADMIN and IPESERVICE users. You cannot choose a different account for these users.
— If you perform a Custom installation, the location of the IPEINSTALL user account will determine the accounts that are available for you to choose as the IPEADMIN and IPESERVICE users. You can only choose accounts for these users from the same location (local machine, domain or trusted domain) as the IPEINSTALL user.
• The location of the IPEINSTALL user account also determines the default value of the OS_USER_LOCATIONS process attribute, which defines where iProcess Engine obtains the list of users when it populates the O/S User List in the TIBCO iProcess Administrator User Manager tool. See TIBCO iProcess Engine Administrator’s Guide for more information about this attribute.

IPEADMIN

IPEADMIN is a Windows user account used to administer TIBCO iProcess Engine.

IPEADMIN permissions are required to perform tasks such as:

• starting, stopping, and configuring iProcess Engine.
• running utilities, such as SWDIR\bin\swutil or SWDIR\util\LDAPCONF.

IPESERVICE

IPESERVICE is a Windows user account used to run TIBCO iProcess Engine, specifically:

• the iProcess nodeName Process Sentinels service, which runs all iProcess Engine processes.
• the iProcess Events64 COM+ application, which provides the publish or subscribe event mechanism used for inter-process communication by iProcess Engine processes.

Note 

By default, the Windows user account that is used as the IPEADMIN user will also be used as the IPESERVICE user.

However, depending on your site’s operational policies, this may not be acceptable. For example, if a user types an incorrect password of the IPEADMIN user account, the account may be locked out. If this also locks out the IPESERVICE account, you will not be able to start the iProcess nodeName Process Sentinels service and the iProcess Events64 COM+ application. In this situation, separate accounts would probably be more suitable.

When you run the installer, you can choose to use separate Windows accounts for the IPEADMIN and IPESERVICE users, but to do so, you must perform a Custom installation, rather than a Basic one.