admin@example.com, hradmin@example.com

[Lawrence Jeyara]

Hi,

I have a question about these IDs(admin@example.com, hradmin@example.com). I understand these comes with the instance as default. I initially thought these are test data and need to be deleted once the instance is set properly with respective users. However I was told that we should not delete these IDs as ServiceNow uses them for many background tasks. From security perspective, this looks like we are keeping a default account which comes with the instance. What is the best way to handle to avoid these accounts being a backdoor? 

[Mark Roethof]

Hi there,

Provide the default admin user with a new password, put the password in a vault 🙂

Indeed, don't delete or deactivate or lock or remove the admin role on the default admin user!

If my answer helped you in any way, please then mark it as helpful.

Kind regards,
Mark
2020-2022 ServiceNow Community MVP
2020-2022 ServiceNow Developer MVP

---

LinkedIn
Community article, blog, video list

[Mark Roethof]

Hi there,

Any follow-up needed? Or was my answer sufficient?
Let me know.

If your question is solved, please close the topic by marking my answer as correct. This will help others searching for a similar question and will remove the topic from the unsolved list.

Kind regards,
Mark
2020-2022 ServiceNow Community MVP
2020-2022 ServiceNow Developer MVP

---

LinkedIn
Community article, blog, video list