For security, create a user account that isn’t an administrator account, and use that account when you don’t need administrator privileges. Limit the number of people with administrator privileges. If you enabled the root user and no longer need it, disable it.
Create a standard user account in the Users & Groups pane of System Preferences on the server.
In the server’s login window, use a standard user account instead of an administrator account.
Use your administrator account with any app that requires administrator privileges.
For example, use your administrator name and password with the Server app when you need to manage users, groups, or services.
The new user account also appears in the Users pane of the Server app, and it can be used to access services provided by your server from a user’s computer on the network.