To eliminate dynamic organization ACIs

1. Log in to the AM console as amadmin.

   The AM console is located at the following url:

   http://<machine name>:<port>/amconsole

   where

   <machine name> is machine where Access Manager is running

   <port> is the port

2. Select the Service Configuration tab.

   By default, the Administration configuration page is displayed.

3. In the right side of the console, scroll down to Dynamic Administrative Role ACIs.

4. Select and delete all ACIs in the text box for Dynamic Administrative Role ACIs.

5. Save the edited settings.