Certserver.kra.connector; Certserver.kra.key - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Operations
read Viewing automatic key recovery automatic configuration, key recovery
archive configuration, and notification request in queue configuration.
modify Modifying automatic key recovery archive configuration, agent
passwords,
Default ACIs
allow (read) group="Administrators" || group="Auditors" ||
group="Certificate Manager Agents" || group="Registration Manager
Agents" || group="Data Recovery Manager Agents" || group="Online
Certificate Status Manager Agents"
allow (modify) group="Administrators"
Administrators, auditors, and agents are allowed to read Data Recovery Manager general
configuration; only administrators are allowed to modify Data Recovery Manager
configuration.

certServer.kra.connector

Allow or deny to submit requests.
Operations
submit Submitting requests.
Default ACIs
allow (submit) group="Trusted Managers"
Only Trusted Managers can submit requests.

certServer.kra.key

Allow or deny a read, recover, or download operation for the Data Recovery Manager.
scheme, and notification request in queue configuration.
MxN
ACL Reference
Chapter 9 Authorization 353