Newbie here. I have a use-case where I need to delete host principals only when no service principals exist on the host. Does "ipa host-del" perform this check? If No, then when I run this command would it delete the host principal and along with it delete all the service principals associated ?

I tried to run the command on a host but got the following error:

ipa: ERROR: Insufficient access: Insufficient 'delete' privilege to delete the entry

What privileges are needed to run this command ? I was already kinit as an admin.