ISE uses two database accounts. One is the admin account, and the second is the user account. In case you'd like to reset or change it later in your deployment, you can reset them from the standard ISE CLI with the following commands
application reset-passwd ise internal-database-adminapplication reset-passwd ise internal-database-user
Note: If you reset the internal database user password, Cisco ISE prompts you to restart the application. The internal database user password is reset after you restart the Cisco ISE application.
ISE uses a different account to allow user to access User Interface (UI). This can also be reset with the help of standard CLI command.
# application reset-passwd application-name administrator-ID!--application reset-passwd ise admin
For accessing Command Line Interface (CLI) of ISE, we need a different admin account. If no one is able to log into the Cisco ISE system because the administrator password has been lost, forgotten, or compromised, we can only use the Recovery DVD to reset the ISE CLI admin password.