Forum Discussion

bsalamone's avatar
bsalamone
New Contributor II
2 years ago

Administrator account

Hello, We have received a question from a client's audit team and was hoping someone could point to any documentation regarding this as I've searched but couldn't find anything. Does anyone, OneStre...
Security
  • MikeG's avatar
    MikeG
    2 years ago

    The license owner for the client would have the Administrator credentials.  Nobody else technically should need it.  It is used during the initial installation of OS, at that point I would recommend it remain only for server-side needs such as platform upgrades, and not used for task scheduling.  Hope that helps and good luck supporting your client audit.

MikeG's avatar
MikeG
Contributor III

I would recommend you keep the Administrator account confidential to the core team.  For scheduling of tasks and automation, I'd suggest you create a service account like OS_Service or OS_Admin and have that ID schedule application tasks via Task Scheduler.

bsalamone's avatar
bsalamone
New Contributor II
2 years ago

Thanks for the response. I don't intend to change the account just more curious as to who has the credentials if anyone. It seems like it is a default account on all applications so wasn't sure if that meant that the OS Cloud team kept those credentials or if anyone else would have them.

  • MikeG's avatar
    MikeG
    Contributor III
    2 years ago

    The license owner for the client would have the Administrator credentials.  Nobody else technically should need it.  It is used during the initial installation of OS, at that point I would recommend it remain only for server-side needs such as platform upgrades, and not used for task scheduling.  Hope that helps and good luck supporting your client audit.