Who runs <job-config>

I am wondering what user runs scheduled jobs, and if it is “administrator”, how might I implement code to run as an account with reduced privileges?

Last time I implemented job through job-config the method for getting actual user actually returns “null” as ConfluenceUser.
So you need to impersonate as someone if you want anything that is not public (for example I was working with long tasks and saw 1 out of 30 in the list as no one).
edit: look more into AuthenticatedUserThreadLocal class