Can I disable the default Ambari and Ranger admin user accounts?

[#1]

I would like to disable the default Ranger and Ambari admin accounts after I have integrated with LDAP and assigned AD users to be admins. Is this possible? The UI does not seem to allow me disable these accounts even if there are other admins identified.

[#2]

The Ambari admin account can be disabled, and if you really like, deleted from the manage ambari users area of the Ambari gui. Of course, you cannot disable it if logged in as admin, you need to log in with another admin account to do it.

[#3 · Accepted solution]

To disable admin user in Ranger, Gautham had shared the below steps:

1. Log in to Ranger Admin using admin/admin
2. Go to “Settings” -> “Users/Groups”
   1. Select one of the external user synced using LDAP( E.g : ldap_admin )
   2. Change its role to ADMIN
   3. Click Save
3. Log out of Ranger Admin
4. Log in to Ranger Admin using the external user (ldap_admin)
5. Go to “Settings” -> “Users/Groups”
   1. Click on the checkbox next to admin user
   2. Select "Set Status” -> “Disabled” from the top right.
6. Log out of Ranger Admin

After this point the default admin user will not be able to login and the new admin will be ldap_admin.

Important Note : You will have to change the following Ambari properties to take note of new admin user

• “Ranger” -> “Configs” -> “Advanced ranger-env”
  • admin_username ( This should be the external user that you designated as admin in 2.1 above )
  • admin_password ( The password of above user )