Discovery Accelarator security hardening

Hi to all EVguys.....

I got a request to remove every permissions from EVDA for all users (including EV service account and other administrators) except a specific one. I removed the admin roles from all users, except the one I was asked to keep, and for all "normal" domain accounts it was successful and I wasn't even able to login. For EV service account, despite the fact that I removed the roles, I was able to login to the EVDA console and make several changes. Am I missing something or is this the default behavior?

Thanks in advance,

GeorgeG