If you try to delete the default 'admin' user created during installation it will fail with either a: * Failed to perform additional action KatelloForemanEngine::Actions::UserDestroy: 422 Unprocessable Entity or * Failed to perform additional action KatelloForemanEngine::Actions::UserDestroy: 403 Forbidden We need to allow deleting of any user without error as long as the rules are maintained to have an existing user with Administrator rights within the database.
Foreman requires an admin user that it uses for various anonymous actions, e.g. Puppet report uploads, hosts updating their build state and when logins are disabled. I'm not sure that having this fall back to another user that happens to have admin right would be desirable either, so I'd suggest we still need some sort of anonymous admin user by default for automated actions. It would make sense though to only allow user-defined users to be able to log in and to have the anonymous admin account locked and unusable.
*** This bug has been marked as a duplicate of bug 868910 ***