Disabling the primary site administrator account

To help ensure a secure environment for ArcGIS Server, it's recommended that you disable the primary site administrator account. This ensures that there isn't another way to administer ArcGIS Server other than the group or role you've specified in your identity store.

Before proceeding, ensure that the identity store in which you are planning to use to maintain the administrator accounts is in working order and available. If your identity store becomes corrupted or unavailable, you won't be able to log in to your site or use ArcGIS Server. To learn how to set up an identity store to work with ArcGIS Server, see Configuring ArcGIS Server security.

Note:

Once the primary site administrator account has been disabled, changes to the identity store are not allowed.

If you used the primary site administrator account to register the ArcGIS Web Adaptor with your site, and then you later disable the account, there is no need for you to reconfigure the Web Adaptor. HTTP communication is not disrupted between the Web Adaptor and the site after disabling the account.

Follow the steps below to disable the primary site administrator account.

Steps:

1. Grant administrator privileges to the roles in your identity store in which you want to have the same access as the primary site administrator account.
2. Open the ArcGIS Server Administrator Directory and log in. Typically, this is located at http://myserver:6080/arcgis/admin.
3. Click security > psa > disable.
4. On the Operation - disable page, click Disable to disable the primary site administrator account.

If you want to re-enable the primary site administrator account, you'll need to log in to the ArcGIS Server Administrator Directory with an account that has administrative access. You're required to re-enable the primary site administrator before you can change the identity store that is used to manage ArcGIS Server security.