Replacing the original "security administrator" user with a new user

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

The customer is currently using PAMSC Endpoint with, for example, user1 account, as the security administrator account. So this user1 is specified at the prompt below during installation.

 

-------------------[ Set up security administrators ]-------------------
You may define users as security administrators and auditors.
Specify user IDs separated by space, other than root.
If you do not want to define administrators now, hit ENTER.

Please enter administrator names [none]:

They plan to create a new OS account named, for example, user2, and change the security administrator account to user2.

How can we configure user2? And please advise if it is safe to remove the original user1 account.
Can deleting the user2 account after this change cause issues with PAMSC service operations (such as service startup, communication, or internal process dependencies)?

 

Environment

PAMSC 14.x on Solaris

Resolution

The installation creates the user1 USER in PAMSC database with the following rules.

editusr ('user1') admin auditor audit(FAILURE LOGINSUCCESS LOGINFAILURE)
chusr  ('user1') owner('root')
join   ('user1') group('seosaudt') owner('root')
authorize TERMINAL ('<fqhn>') access(READ WRITE) uid('user1')

So you can create user2 USER in PAMSC database similarly and then delete the original user1.

rmusr user1

This changes should not cause any issues with PAMSC service operations