Functional Account and Managed Account in Beyondtrust Password safe

Hi Every one, lets talk bout network security . Basically on privileged access management (PAM) technology have some account that have different function. its also on Beyondtrust. This all account have different function on Beyondtrust , bellow all account on Beyondtrust password safe and each function for my perspective :

  

1. Functional Account
   Functional account basically on Beyondtrust password safe should be and administrator privilege account, the function its self on beyondtrust environment are for rotating managed account password for do password management. functional account in beyondtrust can be configured under menu configuration , then functional account.    
    
2. Scanner Account  
   Scanner Account basic function are for scan asset that will be managed by Beyondtrust password safe. we can configure it under scan menu on beyondtrust password safe.
   
   
3.  Managed Account 
   Managed account by default on password safe are used to remote asset that already managed by Beyondtrust password safe. 
   
   
4. Binding Account
   Binding account in Beyondtrust password are same with other product or solution, its used for AD query and grab all AD account.