Use a token instead of enabling GIS Server Primary Admin account to register an ArcGIS Server component
Hi all,
In the current version ArcGIS Monitor 2023.3.1, to register an ArcGIS Server, we must enable and use the ArcGIS Server Primary Admin Account. This helps the Monitor run well without being impacted by possible GIS Enterprise’s failure, but conflicts with the following ESRI security policy:
Disable the primary site administrator account (https://enterprise.arcgis.com/en/server/latest/administer/linux/disabling-the-primary-site-administr...).
My client’s production Monitor 2023.3 can’t register the GIS Server components due to the above security policy.
The previous version ArcGIS Monitor 10.8.1 uses a token from GIS Enterprise without enabling the ArcGIS Server Primary Admin Account. It does not have issues on security policies. But if the GIS Enterprise failed, then Monitor will not fail too.
Is it possible in the future version, ESRI can continue disable the ArcGIS Server Primary account and use a token generated by Monitor but accepted by both Monitor and ArcGIS Enterprise, to register the ArcGIS Component in Monitor?
In that case, we can have both security and reliability.
What do you think about that?
Thanks,
George
