Certificate Administrators
Members of the Certificate Administrators role can perform the following operations.
- Subscription management
- User management
- CA management
- Certificate management
- Enrollment automation
- eForm enrollment
- CA Gateway management
- Report management
Subscription management
Members of the Certificate Administrators role cannot manage subscriptions.
| Operation | Authorized |
|---|---|
| Checking your subscriptions | ❌ |
| Creating instances | ❌ |
User management
Members of the Certificate Administrators role cannot manage users.
| Operation | Authorized |
|---|---|
| Inviting users | ❌ |
| Managing roles | ❌ |
CA management
Members of the Certificate Administrators role can perform the following CA management operations.
Certificate management
Members of the Certificate Administrators role can perform all certificate management operations.
Enrollment automation
Members of the Certificate Administrators role can inspect only the enrollment configuration.
| Operation | Authorized |
|---|---|
| Configuring ACME in PKIaaS | Read access |
| Configuring Intune in PKIaaS | Read access |
| Configuring Jamf in PKIaaS | Read access |
| Configuring Workspace ONE in PKIaaS | Read access |
| Configuring Ivanti in PKIaaS | Read access |
| Configuring MDM IBM MaaS360 in PKIaaS | Read access |
eForm enrollment
Members of the Certificate Administrators role cannot perform eForm enrollment operations.
| Operation | Authorized |
|---|---|
| Creating an eForm enrollment workflow | ❌ |
| Requesting eForm entities | ❌ |
| Approving and managing eForm entities | ❌ |
| Downloading eForm entity certificates | ❌ |
CA Gateway management
Members of the Certificate Administrators role cannot perform the operation described in Managing CA Gateway credentials.
Report management
Members of the Certificate Administrators role can perform the following operations on reports.
| Role | Authorized |
|---|---|
| Designing reports | ❌ |
| Manually generating reports | ❌ |
| Downloading reports | ✔ |
| Disabling and re-enabling reports | ❌ |