When you use the Delegated Administrator console to create an organization, a group of ACIs is created on the organization node.
The replacement ACIs installed in the preceding procedure eliminate the need for these per-organization ACIs. You can prevent the creation of the per-organization ACIs by using the Access Manager console.
Log in to the AM console as amadmin.
The AM console is located at the following url:
<machine name> is machine where Access Manager is running
<port> is the port
Select the Service Configuration tab.
By default, the Administration configuration page is displayed.
In the right side of the console, scroll down to Dynamic Administrative Role ACIs.
Select and delete all ACIs in the text box for Dynamic Administrative Role ACIs.
Save the edited settings.