Installation of CSM software includes a default account for administrative access to keycloak.
Depending on choices made during the installation, there may be a federated connection to an external Identity Provider (IdP), such as an LDAP or AD server, which enables the use of external accounts in keycloak.
However, if the external accounts are not available, then an “internal user account” could be
created in keycloak. Having a usable account in keycloak with administrative authorization
enables the use of the cray CLI for many administrative commands, such as those used to
Validate CSM Health and general operation of the management services
via the API gateway.
In Security and Authentication see the “Default Keycloak Realms, Accounts, and Clients” section for more information about these topics: