BigFix authentication on endpoints

If I push a patch action on endpoint, Which ID/authentication BigFix will use to perform those operations on endpoint?

By default it will execute as local system unless you specify otherwise.