CA Auditors
Members of the CA Auditors role can perform the following operations.
- Subscription management
- User management
- CA management
- Certificate management
- Enrollment management
- eForm enrollment
- CA Gateway management
- Report management
Subscription management
Members of the CA Auditors role cannot manage subscriptions.
| Operation | Authorized |
|---|---|
| Checking your subscriptions | ❌ |
| Creating instances | ❌ |
User management
Members of the CA Auditors role cannot manage users.
| Operation | Authorized |
|---|---|
| Inviting users | ❌ |
| Managing roles | ❌ |
CA management
Members of the CA Auditors role can perform the following CA management operations.
Certificate management
Members of the CA Auditors role can perform the following certificate management operations.
Enrollment management
Members of the CA Auditors role can inspect only the enrollment configuration.
| Operation | Authorized |
|---|---|
| Configuring ACME in PKIaaS | Read access |
| Configuring Intune in PKIaaS | Read access |
| Configuring Jamf in PKIaaS | Read access |
| Configuring Workspace ONE in PKIaaS | Read access |
| Configuring Ivanti in PKIaaS | Read access |
| Configuring MDM IBM MaaS360 in PKIaaS | Read access |
eForm enrollment
Members of the CA Auditors role cannot perform eForm enrollment operations.
| Operation | Authorized |
|---|---|
| Creating an eForm enrollment workflow | ❌ |
| Requesting eForm entities | ❌ |
| Approving and managing eForm entities | ❌ |
| Downloading eForm entity certificates | ❌ |
CA Gateway management
Members of the CA Auditors role cannot perform the operation described in Managing CA Gateway credentials.
Report management
Members of the CA Auditors role can perform the following operations on reports.
| Role | Authorized |
|---|---|
| Designing reports | ❌ |
| Manually generating reports | ❌ |
| Downloading reports | ✔ |
| Disabling and re-enabling reports | ❌ |