# Which user should run vault agent?

**URL:** <https://discuss.hashicorp.com/t/which-user-should-run-vault-agent/22830>\
**Category:** Vault\
**Created:** [April 6, 2021, 10:09am UTC](https://discuss.hashicorp.com/t/which-user-should-run-vault-agent/22830 "2021-04-06T10:09:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kingindanord](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/kingindanord/32/8665_2.png) [@kingindanord](https://discuss.hashicorp.com/u/kingindanord)\
**Post date:** [April 6, 2021, 10:09am UTC](https://discuss.hashicorp.com/t/which-user-should-run-vault-agent/22830/1 "2021-04-06T10:09:24Z")

</div>

should vault agent service run as root or vault user?

---

<div class="post-metadata">

**Author:** ![grantorchard1](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/grantorchard1/32/17626_2.png) [@grantorchard1](https://discuss.hashicorp.com/u/grantorchard1)\
**Post date:** [April 6, 2021, 1:35pm UTC](https://discuss.hashicorp.com/t/which-user-should-run-vault-agent/22830/2 "2021-04-06T13:35:24Z")

</div>

Having a dedicated user is a much more secure option, especially since the agent can execute commands as part of template rendering.

Cheers,  
Grant