Data360 Analyze

Assume you install d360a on a fresh windows server 2016 instance.  what folder permissions does d360a have?  Put another way, if one were to assign access to d360a to a particular folder on that server what is the d360a "user" account that will need the permission assigned to it.

Or does it take the user credentials of the client user who logs into d360a?  If so, where is that controlled?

The user that is used to install the Analyze instance on the Widows Server machine will require full access to the installation directory. Similarly, full access will be required for the directory specified to hold the 'site' configuration information and the 'data' directory storing the intermediate data generated by the operation of the system.

When users access the Analyze system UI via the browser, all operations are performed with the privileges of the service account under which the Analyze software is running, not the identity of the end user accessing the system. However, when running a data flow that access is configured to access an external system or service, for instance, a database or SalesForce, the nodes are typically configured with the credentials of the individual user. Credentials can be specified using Run Properties - allowing a common data flow to be used by multiple individuals but require the user to enter their credentials at run time (or when the schedule is created). Where the system is set to store a password this is securely stored in an encrypted form.

Thanks - my question is specfically onthis part:

"When users access the Analyze system UI via the browser, all operations are performed with the privileges of the service account under which the Analyze software is running"

Can you expand on the "service account" what is the default identity / identifier / name of such service account please?

There is no default imposed. The software can be installed by any use logged in provided they have sufficient Administrative permissions (or those permissions are temporarily increased to have Admin privileges for the install). 

When the services are to be started you can configure the user under which the Analyse services will run in the services.msc by setting the properties for the three services