How to start a pool in IIS from a specific user who will have certain rights to the directories of the site being launched?

Question

PHP

Good afternoon, it’s difficult to describe my task in the title, if in more detail it is the following
There is Windows Server 2012R2, IIS and CGI are configured on it
PHP is configured via CGI It is
necessary to install Drupal on the server, but each Drupal site needs to be in a separate pool, i. one pool - one site, it seems to be not a problem to set up a pool for each site. The problem is different, in theory for Drupal (although not only for him, but for many cms and other php applications) you need to set the rights to change on the default folder, and make such rights necessary for that user, or service, or whatever, from what name the site starts up, namely in my case php-cgi.exe.
And here I am lost, how to do it right, a few thoughts
it seems like many people give the user iis_iusrs the right to change, it's something like some kind of user of iis itself,
but again, I think it's probably right to make a service user in Active Directory from which to run all this goodness, and to which to give these rights to change
another read the option here www.iis.net/learn/application-frameworks/scenario-...
where they write that for each created user there is also a certain location that can also be given rights in the security tab
, in general, I'm confused, please help

Answer 1

I will supplement the first answer, as far as I remember, in order for everything to work correctly, it is necessary, in addition to adding a service account to iis_iusrs, in local policies to throw Log on as a batch job into permissions