Does this all run as some user's ID? Is it storing/managing credentials for them? RPA tools seem to be all the rage, but questions around accountability, audit

Does this all run as some user's ID? Is it storing/managing credentials for them? RPA tools seem to be all the rage, but questions around accountability, auditability and other security aspects still stand out.