Red Hat CERTIFICATE SYSTEM 8 - AGENTS GUIDE Agents Manual page 82

Chapter 6. RA: Requesting and Receiving Certificates Locally
5. Click the Add New Group link at the top of the form.
6. After the group is created, add it to the RA configuration so that the group has agent or
administrative functions.
a. Stop the RA instance.
service pki-ra stop
Always stop a subsystem before editing the subsystem configuration files.
b. Open the CS.cfg file.
vim -/var/lib/pki-ra/conf/CS.conf
c. Add the new group's GID to the adminsitrator or agent group list.
admin.authorized_groups=administrators,example
agent.authorized_groups=administrators,agents,example
d. Start the RA instance.
service pki-ra start
6.5.1.3. Adding and Removing Users in an RA Group
When a group is created, it does not have any members. Likewise, as new users are added, they have
to be added to a group for them to be granted any privileges to the RA.
1. Open the RA services page.
https://server.example.com:12889/services
2. Click the Administrator Services link.
3. Click the List Groups link.
4. Click the name of the group for which to change the group membership.
72