Account used for SAM on Linux accesses passwd, hosts, etc

Hi Everyone,

We are using SAM in our company and we recently installed SAM for monitoring our Linux systems and the templates used was to CPU, Memory, Disk and NTP.  I just wanted to clarify two points.

1) SAM connects via SSH every 3 minutes (the polling time set) to run the scripts in these templates. Is this the only way SAM collects the information ?

2)Each time SAM uses the account to connect to the Linux server via ssh, the server generates permission alerts for passwd, hosts, nsswitch.conf, etc/environment files. Why is that happening?

Thanks in advance.