set user and group mgmt runs as