admin user list
non admin user lsit
remove non-admin

sssd
ldap
AD