This page lists the IAM roles and permissions for Certificate Authority Service. To search through all roles and permissions, see the role and permission index.
Certificate Authority Service roles
Role | Permissions |
---|---|
CA Service Admin( Full access to all CA Service resources. |
|
CA Service Auditor( Read-only access to all CA Service resources. |
|
CA Service Operation Manager( Create and manage CAs, revoke certificates, create certificates templates, and read-only access for CA Service resources. |
|
CA Service Certificate Manager( Create certificates and read-only access for CA Service resources. |
|
CA Service Certificate Requester( Request certificates from CA Service. |
|
CA Service Pool Reader( Read CA Pools in CA Service. |
|
CA Service Certificate Template User( Read, list and use certificate templates. |
|
CA Service Workload Certificate Requester( Request certificates from CA Service with caller's identity. |
|
Certificate Authority Service permissions
Permission | Included in roles |
---|---|
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
Tag User ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
Tag User ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager (
CA Service Pool Reader ( Service agent roles
|
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
CA Service Certificate Manager (
Tag User (
Tag Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
CA Service Certificate Manager (
Tag User (
Tag Viewer ( |
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
CA Service Admin ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
Tag User ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
Tag User ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager (
CA Service Certificate Template User ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager (
CA Service Certificate Template User ( |
|
Owner (
Editor (
Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
CA Service Certificate Manager (
Tag User (
Tag Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
CA Service Admin (
CA Service Operation Manager (
CA Service Certificate Manager (
Tag User (
Tag Viewer ( |
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Certificate Template User ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Certificate Manager (
CA Service Certificate Requester ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Workload Certificate Requester ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( Service agent roles
|
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |
|
Owner (
Editor (
Viewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Editor (
Viewer (
Security Admin (
Security Reviewer (
CA Service Admin (
CA Service Auditor (
CA Service Operation Manager (
CA Service Certificate Manager ( |
|
Owner (
Security Admin (
CA Service Admin ( |
|
Owner (
Editor (
CA Service Admin (
CA Service Operation Manager ( |