How to create a Server Admin so I can disable the PSA

Question

I am working through Security Best Practices for ArcGIS Enterprise and am trying to disable the PSA for Server, but would like to create another general administrator since I use Server Admin almost every day.

I have not found any resources that describe how to create another Server Admin to help with this.  How do you create another admin in Server?

Note: My Server is Federated with a Portal.

Aled Wyn Jones · Answer

Since your ArcGIS Server is federated with Portal - you can create a Portal token to allow you access to your ArcGIS Server admin endpoint.

Visit: https://my.portal.com/portal/sharing/rest/generateToken

In web app URL, paste the URL of your ArcGIS Server admin endpoint. This might looks like this:

https://my.portal.com/server/admin

or

https://myenterpriseMachine.my.domain:6443/arcgis/admin

Then provide Portal credentials (admin). Once you've generated the token, copy it and bring it back to the ArcGIS Server admin endpoint and use it to sign in.

Portals sign-in has lockout (e.g. blocks your IP after X amount of attempts) which makes this the more secure method.