Register ArcGIS Server without PSA

[Oiligriv]

Hi
I have hardened the ArcGIS Enteprise platform, I noticed that by disabling the primary administrator site from ArcGIS Server, ArcGIS Monitor is no longer able to get the metrics. How can I log in to a federated server via ArcGIS Monitor?

Virgilio

[StevenBeothy · Accepted solution]

Hi Virgilio
Please make note that at the moment the ArcGIS Monitor Help does state.

Note: For a federated ArcGIS Server site, the ArcGIS Server primary site administrator user account is required.

Esri is working on aligning their hardening guidelines with certain requirements like the one above to better align the two in the future. 

[DerekLaw]

Hi @Oiligriv,

> I noticed that by disabling the primary administrator site from ArcGIS Server, ArcGIS Monitor is no longer able to get the metrics. 

This is expected behavior. ArcGIS Monitor is considered to be a trusted client to ArcGIS Enterprise and needs to use the primary site administrator (PSA) account to access metrics from a federated ArcGIS Server site.

To add onto @StevenBeothy's comment,

> Esri is working on aligning their hardening guidelines with certain requirements like the one above to better align the two in the future. 

This has already been done. 

Hope this helps,

[JoshuaBixby]

It is common in organizations that built-in administrator accounts need to be disabled as part of security policy.  Setting the discussion of whether ArcGIS Monitor should really need complete admin access aside, requiring the built-in administrator account is not a security best practice.