A caf plugin could be configured to use a specific account as described in this article :
Configure a CAF plugin to run with a different account
How to quickly check if a plugin has been configured to run under a specific user account ?
Client Automation - All Versions
<paramsection name="sdagent">
...
<parameter name="pluginpassword" value="" entity="Client">
<attribute name="write">agent</attribute>
</parameter>
<parameter name="pluginusername" value="" entity="Client">
<attribute name="write">agent</attribute>
</parameter>
<paramsection name="sdagent">.
...
<parameter name="pluginpassword" value="<pwd_encrypted>" entity="Client">
<attribute name="write">agent</attribute>
</parameter>
<parameter name="pluginusername" value="<computername>\<username>" entity="Client">
<attribute name="write">agent</attribute>
</parameter>