Hello @brightk 
You can use a group Managed Service Account (gMSA) to manage and run Control Room and other Automation 360 services.

Reference: https://docs.automationanywhere.com/bundle/enterprise-v2019/page/enterprise-cloud/topics/release-notes/v27-release-rpa-workspace.html 
Search with: Service Cloud case ID: 00731119

Note: The group Managed Service Account (gMSA) provides functionalities such as install, update and perform LDAP authentication within a domain, and also extends those functionalities across multiple servers.
Reference: https://docs.automationanywhere.com/bundle/enterprise-v2019/page/enterprise-cloud/topics/release-notes/v28-release-rpa-workspace.html 

Additional reference: https://docs.automationanywhere.com/bundle/enterprise-v2019/page/enterprise-cloud/topics/deployment-planning/on-prem-install/cloud-custom_install_configure_services.html 

Note: If you are using IQ bot, please note that if you are using a group managed service account (GMSA) set-up, you will not be able to use Google Document AI extraction feature.