|1. Both users are available for the initial configuration. |
2. It is possible for the super user to access all PAM screen. However, the config user can access the configuration screen only. The config user can change the password of both super and config users. But the super user cannot do that. When the super user logs in the PAM, the item "Change Password" will not show in the Configuration. When the config user logs in by the "https://<PAM server>/config/"(Need the slash at last), the item "Change Password" in the Configuration. It is possible to change the password of both from there.
Additionally, the following DocOps page explains about the both users. Please see them.
3. There is not a specific difference during them.
4. All CA support knows are written in the DocOps. It is hard for CA Support to provide the reason why the design was determined. Also, it is normal to login the product by the administrative user after the installation as a standard method. It is the same thing that we will login the Windows by administrator user first after installing the Windows.
5. It's correct.