Enum RunAs 

pub enum RunAs {
    System,
    User,
    SystemGui,
}

Token + session combination the agent uses to spawn a job’s child process. Two orthogonal axes — whose privileges and which session — collapse into three meaningful combinations:

variant	session	privileges	GUI
System (default)	Session 0 (services)	LocalSystem	❌
User	active console session	logged-in user (UAC-filtered when admin)	✅
SystemGui	active console session	LocalSystem	✅

SystemGui is the “PsExec -i -s” pattern: the agent duplicates its own SYSTEM token and rewrites TokenSessionId to the user’s console session, then launches with that hybrid token — useful when an installer needs admin power and needs the user to see its UI.

Variants

System

LocalSystem privileges in Session 0. No GUI. Historical default — every pre-v0.21 job ran this way.

User

The currently-logged-in console user’s identity, in their session. Can write HKCU / %APPDATA% / show GUI to the user. Privileges are whatever the user has (admin users get the UAC-filtered limited token, not the elevated one).

SystemGui

LocalSystem privileges in the user’s session — admin power with GUI visibility. Niche but real (force-restart dialogs, admin installers with progress UI).

Trait Implementations

impl Clone for RunAs

fn clone(&self) -> RunAs

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RunAs

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RunAs

fn default() -> RunAs

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RunAs

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RunAs

fn eq(&self, other: &RunAs) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RunAs

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for RunAs

impl Eq for RunAs

impl StructuralPartialEq for RunAs