
Commerce Server Web Application Accounts and User Groups
You use Service user accounts for the Commerce Server Web applications to perform these tasks:
-
To run Internet Information Services (IIS) application pools.
-
To help secure folders.
-
To establish anonymous access to the Web site.
-
To access the Commerce Server databases.
Commerce Server installs the Web applications when you unpack a Commerce Server site, such as the StarterSite, and select the Web services that you want to install. Each Commerce Server Web application requires definition of a Windows user account and a Windows user group.
The following table summarizes the default names that are used in this deployment guide. You create these items and make assignments before or after you install Commerce Server. You create these accounts and user groups on the data tier domain controller. In addition, you create the RunTimeUser account on the Data tier domain controller.
| Account name | Description |
| RunTimeUser | IIS account for Commerce Server. The identity Commerce Server uses to run the IIS worker process that forms the trusted subsystem. |
| CatalogWebSvc | Account for running the Catalog Web service. |
| MarketingWebSvc | Account for running the Marketing Web service. |
| OrdersWebSvc | Account for running the Orders Web service. |
| ProfilesWebSvc | Account for running the Profiles Web service. |
For each Web application, you create the associated administrative user groups and assign accounts as indicated in the following table. IIS automatically creates the IIS_WPG group.
| Commerce Server Web application default name | User account | User group |
| CatalogWebService | CatalogWebSvc | CatalogAdminGroup, IIS_WPG |
| MarketingWebService | MarketingWebSvc | MarketingAdminGroup, IIS_WPG |
| OrdersWebService | OrdersWebSvc | OrdersAdminGroup, IIS_WPG |
| ProfilesWebService | ProfilesWebSvc | ProfilesAdminGroup, IIS_WPG |
| <site_name> | RunTimeUser | Not applicable |
For each site that you unpack, we recommend that you create unique Web service account names and Windows user groups.