<html><body>Hello, I have been rolling out an IPA deployment for IBM Watson for the past 3 months. Initially I did not want to take on application ids (linux OS Ids owning apps). I now have to so I have created the accounts in IPA however new files created by user wdadeploy are being created with wdadeploy:wdadeploy where the app team wants new files owned wdadeploy:wdaadmins. Is there a way to accomplish this? I wanted the application IDs to stay local but they want to see if this works. <img src="cid:1__=88BBF445DFCB67F68f9e8a93df938690918c88B@" width="965" height="261"> Sean Hogan Security Engineer CISSP,RHCSA,CCNA,MCP,HDI Watson Security & Risk Assurance Watson Cloud Technology and Support email: schogan@us.ibm.com | Tel 919 486 1397 <img src="cid:2__=88BBF445DFCB67F68f9e8a93df938690918c88B@" width="67" height="53" align="top"> <img src="cid:3__=88BBF445DFCB67F68f9e8a93df938690918c88B@" width="60" height="51" align="top"> </body></html>