A complete identity life-cycle process requires, among other things, control over administrative accounts. Besides a normal user account, some users often have one or more…