To install and run the product, as well as run compliance checks, you must sign on to the system with a profile that has *ALLOBJ and *SECADM special authorities. This is to ensure the user has sufficient authority required by IBM i to perform the tasks being run (such as checking user profile attributes, object authorities, etc.) To run the FixIt function you may need additional special authorities depending on what is being "fixed". For example, to fix the auditing system values you will need *AUDIT special authority. To fix TCP/IP servers you need *IOSYSCFG special authority.