You need to create a condor user on all machines running condor: this user will own the files created by the Condor daemons (although the daemons themselves run as root).
The home directory for this user would be centralised, to simplify admin--for ease of explanation, I'll assume this setup here.