EDR: Is it possible to delete the Global Administrator User from EDR server?
book
Article ID: 288476
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Is it possible to delete the Global Administrator User from EDR server?
Environment
EDR(Formerly Carbon Black Response) Server: All Supported Versions
Resolution
Yes, It is possible to delete the Global Administrator User from the EDR server.
A user account can be removed from the system when that user no longer needs access to the Carbon Black EDR console or leaves the organization.
Users who have Global Administrator privileges can delete any account except their own and the built-in administrator account.
If the user with the deleted account belongs to a team, the user is automatically removed from the team when the account is deleted.
A Global Administrator can delete any account except the one you are logged in as, including the administration account that was created during the server installation. To delete a Global Administrator Account, The User must have a Global Administrator rights.
Additional Information
Make sure to change the API user token associated with the account before deletion.
More details are available under topicĀ "Deleting User Accounts" in the EDR User Guide