I am starting cloud node in a systemctl service script and cloud node launches the Standard ERP I can see who launched the exe by looking systemctl status:
Main PID: 145 (hansa-cloudnode)
CGroup: /system.slice/hansass.service
|-145 /home/some_path/cloudnode/hansa-cloudnode
`-693 StandardERPServer64 --workdir /home/some_path/ --hobfolder