Crawler
If an item is secured, the crawler extracts the permissions from the secured enterprise system, and saves them as item metadata (see Content Security and Coveo management of security identities and item permissions).
For more information, see: