Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 360

Chapter 14. Managing Certificate System Users and Groups
4. Fill in the group ID and the name of the group; the name can be longer than the GID, more like a
description, to help differentiate the group.
5. Click the Add New Group link at the top of the form.
6. After the group is created, add it to the RA configuration so that the group has agent or
administrative functions.
a. Stop the RA instance.
service pki-ra stop
Always stop a subsystem before editing the subsystem configuration files.
b. Open the CS.cfg file.
vim /var/lib/pki-ra/conf/CS.conf
c. Add the new group's GID to the administrator or agent group list.
admin.authorized_groups=administrators,example
agent.authorized_groups=administrators,agents,example
d. Start the RA instance.
service pki-ra start
14.4.1.3. Adding and Removing Users in an RA Group
When a group is created, it does not have any members. Likewise, as new users are added, they have
to be added to a group for them to be granted any privileges to the RA.
1. Open the RA services page.
338