DefinitionA dedicated identity created in a source system, limited to the minimum a workflow needs, used instead of the owner's administrator credentials.
Do not confuse withA separate Bot, which provides no isolation. Where a workload genuinely needs its own credentials and machine, the answer is a separate Cursor user.