For SQL server authentication, IM Security uses the SQL user account to access and query logs from the IM Security database.

For Windows authentication, IM Security uses the Windows user account which started the IM Security services to access and query logs from the IM Security database.