Disable Pega out-of-box users
We have several Pega user accounts on the production environment:
Proprietary information hidden
Proprietary information hidden
EXTERNAL
EXTERNALINVITEUSER
INTSAMPLEUSER
PRPC_SOAPOPER
Proprietary information hidden
Will it be safe and correct if we disable them?
Pegasystems Inc.
US
Hi Anton,
Most of these operators are being used by the Pega Strategic applications and would like to know why you want to disable them? I would suggest you to know the usage of each operator in your application and take the respective action.
Regards,
Mahesh M
Pegasystems Inc.
IN
Hi,
So there was some work done on this by Pega, you can refer below article
https://community.pega.com/knowledgebase/articles/disabling-default-operators-insecure-passwords
You can always use what is suggested in the post. But it's always safe to keep an admin operator
Thank You
Pegasystems Inc.
IN
You can take either approach, as the disable operator utility was designed to force everyone to either change the password or disable OOTB operators completely.
Over the time it was released that people were still using the OOTB password which was not safe. So if you move to 7.4 you would anyway have to do. But if you using older version then you can use this utility it will do it for you, than you doing it manually.
So final take is either change password or disable them, as Pega recommend the same.
Let me know if you have any query regarding the utility link I shared.
Thank You
Pegasystems Inc.
US
there should be no reason to know the default passwords, that would be a security concern. These users are disabled by default in the latest version as they should.