When the appserver starts up, the initial connection to the file server happens as ‘System:System’, so you would need a normal mapping for that role:user. after that you could use the AP if all roles map to an AP on the file server.
So you mean, I have to use a local account (not an admin account due to policy restriction) and give this account the security permission to play with BL file server repository and then have the users.local file:
System:System rw,map=<local account>
Thank you Bill for the explanation.