To help ensure a secure environment for ArcGIS Notebook Server, it is recommended that you disable the primary site administrator account. This ensures that the only way to administer ArcGIS Notebook Server is through the group or role you've specified in your identity store.
Caution:
If you choose not to disable the primary site administrator account, it is important that you change the password for the primary site administrator when someone who knows the password leaves your organization.
Before proceeding, ensure that ArcGIS Notebook Server is federated with a portal and is available. If your portal is unavailable, you cannot sign in to your site or use ArcGIS Notebook Server.
If you used the primary site administrator account to register ArcGIS Web Adaptor with your site, and you later disabled the account, you do not need to reconfigure ArcGIS Web Adaptor. HTTP communication is not disrupted between ArcGIS Web Adaptor and the site after disabling the account.
To disable the primary site administrator account, complete the following steps:
- Open the ArcGIS Notebook Server Administrator Directory and sign in with an account that has administrative access.
Typically, this is located at https://notebookserver.domain.com:11443/arcgis/admin
- Click security > psa > disable.
- On the Disable primary site administrator operation page, click Disable to disable the primary site administrator account.
Disable the primary site administrator account using the password reset command line utility tool
To disable the primary site administrator account without access to an account with administrative access using the password rest utility tool, complete the following steps:
- Sign in to your ArcGIS Notebook Server machine.
- Open a new terminal window.
- Change your directory to <ArcGIS Notebook Server installation directory>/server/tools/passwordreset.
- Run the passwordreset.sh utility:
./passwordreset.sh -dThe primary site administrator account is now disabled.
Re-enable the primary site administrator account
To re-enable the primary site administrator account, complete the following steps:
- Open the ArcGIS Notebook Server Administrator Directory and sign in with an account that has administrative access.
Typically, this is located at https://notebookserver.domain.com:11443/arcgis/admin.
- Click security > psa > enable.
- On the Enable primary site administrator operation page, click Enable to enable the primary site administrator account.
Re-enable the primary site administrator account using the password reset command line utility tool
To re-enable the primary site administrator account without access to an account with administrative access using the password reset utility tool, complete the following steps:
Note:
You can also use this tool to recover the name and password of the primary site administrator account.
- Sign in to your ArcGIS Notebook Server machine.
- Open a new terminal window.
- Change your directory to <ArcGIS Notebook Server installation directory>/server/tools/passwordreset.
- Run the passwordreset.sh utility:
./passwordreset.sh -eThe primary site administrator account is now enabled.