TM1 Forum

Hi all,

I'm using 9.5.2. i tried to delete the default "admin" ID that comes with every installation but an error message appeared saying that it cannot be deleted.

I was told that previous versions allow "admin" Id to be deleted. Is this true?

Also, if this admin Id cannot be deleted, this means that it has to be one of the Modeller licenses that the company had purchased. but if the company has a policy that all IDs must be named using the Staff Id, then this "extra" admin ID will infringe the license agreement, right?

Look forward to your response.

Harry

harrytm1 wrote:Hi all,

I'm using 9.5.2. i tried to delete the default "admin" ID that comes with every installation but an error message appeared saying that it cannot be deleted.

I was told that previous versions allow "admin" Id to be deleted. Is this true?

Not to my knowledge, no. I believe that this account has always been unable to be deleted.

harrytm1 wrote:Also, if this admin Id cannot be deleted, this means that it has to be one of the Modeller licenses that the company had purchased. but if the company has a policy that all IDs must be named using the Staff Id, then this "extra" admin ID will infringe the license agreement, right?

Yeah, I've sometimes wondered about that myself. You really need to talk to your Cognos rep about that but my feeling is that since they made the account impossible to delete, and you have no desire or intention of using it but instead use named admin accounts (as we do), it would be iniquitous in the extreme if the built-in accounts were to be counted in your named user licence count. Of course this IS IBM we're talking about, but if push came to shove and they insisted that the Admin accounts were to be counted I don't see why you wouldn't be within your rights to demand that they fix it as a bug.

However my feeling is that even IBM wouldn't be that unreasonable on this point.

If you really want to remove it I think you can using TI. I know you can remove the admin group using TI but I've not tried deleting the user. Tread carefully mind, this is the ID that the software uses ro run chores etc..

I tried once
I was working round the awful ETLAP stuff to allow integration of TM1 security with AD and wanted to _replace_ all IDs in the system with the contents of an AD group. Deletion of Admin failed.
BTW, if anyone has insight into the equally or more awful integration of CAM with AD, we'd much appreciate it - IBM support have not so far been able to help us.

jim wood wrote:If you really want to remove it I think you can using TI. I know you can remove the admin group using TI but I've not tried deleting the user. Tread carefully mind, this is the ID that the software uses ro run chores etc..

Are you sure (x2)? I'm fairly certain that although this might remove the group from the }Groups dimension it would still be in the security model and would regenerate on a server restart. Also the admin account is not used to run chores, the scheduler inserts a temporary user which is not a member of }Clients dim with I think from memory the name of C*<whatever the chore name is>. You can check this out for yourself quite easily by just looking at tm1top while a chore is running.

AFAIK removing the admin user or group has never been possible in any version of TM1.

I'm sure as I re-started the service and was not able to log on using any admin account.