Add "instructions" for deleting the setup user (#59629)

Author: lecoursen

content/admin/concepts/identity-and-access-management/setup-user.md

@@ -1,6 +1,6 @@
 ---
 title: Setup user
-intro: 'The setup user is used to configure authentication and provisioning for {% data variables.product.prodname_emus %}.'
+intro: 'The setup user is used only to configure authentication and provisioning for {% data variables.product.prodname_emus %}.'
 versions:
   ghec: '*'
 topics:
@@ -11,25 +11,37 @@ topics:
 
 ## How should I use the setup user?
 
-The setup user is **only** intended to be used for:
+The setup user is an administrative account. It is **only** intended to be used for:
 
 * Configuring authentication and provisioning
 * SCIM provisioning via its {% data variables.product.pat_generic %}
-* Regaining access to your enterprise in the event of an issue with your identity provider, by utilizing the enterprise's recovery codes
+* Regaining access to your enterprise in the event of an issue with your identity provider
 
-For other enterprise administration tasks, such as creating organizations, use a provisioned managed user account with the appropriate administrative role.
+For other enterprise administration tasks, such as creating organizations, use a **provisioned managed user account** with the appropriate administrative role.
 
-## How do I sign in as the setup user?
+## What is the setup user's username?
+
+If you use **{% data variables.product.prodname_dotcom_the_website %}**, the username is your enterprise's shortcode, suffixed with `_admin`. For example: `fabrikam_admin`. 
 
-After we create your enterprise, you will receive an **email** inviting you to choose a password for the setup user.
+If you use **{% data variables.enterprise.data_residency_site %}**, the username is a randomly generated shortcode, suffixed with `_admin`.
+
+## How do I sign in as the setup user?
 
-When you create the password, you should enable two-factor authentication (2FA) for the account.
+After we create your enterprise, you will receive an **email** inviting you to choose a password for the setup user. 
 
-Unlike provisioned managed users, the setup user cannot sign in via SSO. Instead, the following applies:
+When you create the password, we strongly recommend that you **enable two-factor authentication (2FA)** for the account and **save your recovery codes**. 
 
-* **With 2FA enabled**: All subsequent login attempts for the setup user account will require a successful 2FA challenge response. After completing the 2FA challenge, you will be prompted for a recovery code. You can skip this prompt and navigate directly to {% data variables.product.prodname_dotcom_the_website %} to access the setup user account. However, accessing your enterprise settings will always require a recovery code.
-* **Without 2FA enabled**: You must provide a recovery code every time you sign in.
+Unlike provisioned managed users, the setup user cannot sign in via SSO. 
 
-We strongly recommend enabling 2FA on the setup user to avoid needing a recovery code for every sign-in attempt. To avoid being locked out of your account, after enabling single sign-on, **save your recovery codes**. See [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users).
+- **Without 2FA enabled**, you must provide a recovery code **every** time you sign in.
+- If **2FA is enabled**, you can sign in with a successful 2FA challenge response. You only need to provide a recovery code to access enterprise settings.
 
 {% data reusables.enterprise-accounts.emu-password-reset-session %}
+
+## Can I delete the setup user?
+
+The setup user **cannot** be deleted, because it is essential for maintaining authentication and provisioning. The only way to remove the setup user is to delete your enterprise account. See [AUTOTITLE](/admin/managing-your-enterprise-account/deleting-an-enterprise-account).
+
+## Further reading
+
+- [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users)