Delete the Local User After Installing Anypoint Platform PCE

During installation, Anypoint Platform Private Cloud Edition (Anypoint Platform PCE) creates a local Anypoint Platform user that enables you to configure platform components during installation. The credentials for this user are stored locally in Anypoint Platform. However, after configuring an external authentication provider such as LDAP, you should delete this user to improve security.

Before deleting the local user, perform the following:
- Install and configure your external identity provider.
- Ensure that SystemAdmin user is not the owner of any other organizations.
Select the new user to whom you want to assign administrator privileges. This user must be defined in your external identity provider.
Determine the internal user ID for this user.
1. From Anypoint Platform, select Access Management.
2. Select Users and then select the name of the user.
3. Record the internal user ID. This ID appears in the URL as:
Enter the gravity shell:
```
gravity enter
```

Identify one of the authentication-server containers:

kubectl get pods -n access-management -l component=authentication-server

Change the owner, providing the internal the authentication-server container and user ID obtained earlier:

kubectl exec -it -n access-management <authentication-server-pod> -c application – node bin/change_owner.js --new-owner-id <user_id>

This command changes the owner from the default system user to a new user managed by the external authentication provider. The command you use should be similar to the following example:

kubectl exec -it -n access-management <authentication-server-pod> -c application – node bin/change_owner.js --new-owner-id a363279f-982f-493c-b08f-9feb91be90d4

Disable and delete the System Admin user.
1. Log in as the user you just added as the organization owner.
2. From Anypoint Platform, select Access Management.
3. Select Users and then select username in the same row as SystemAdmin.
4. Select Disable and then select Delete.
  
  This removes the default user from the platform.