Operations
submit
Submitting an enrollment request for processing.
read
Viewing the details of an enrollment request.
execute
Modifying the approval state of an enrollment request.
assign
Assigning an enrollment request.
unassign
Unassigning an enrollment request.
Default ACIs
allow (submit) user="anybody"
allow (read,execute,assign,unassign) group="Registration Manager
Agents"
Anyone can submit an enrollment request; only Registration Manager Agents can
read or execute requests.
certServer.ra.request.profile
Allow or deny an approve or read operation to a certificate profile-based request in
the agent services interface of a Registration Manager.
Operations
approve
Modifying the approval state of a certificate profile-based request.
read
Viewing a certificate profile-based request.
Default ACIs
allow (approve,read) group="Registration Manager Agents"
Registration Manager agents can view and approve certificate profile-based
requests.
certServer.ra.requests
Allow or deny a list operation for requests in the agent services interface of a
Registration Manager.
ACL Reference
Chapter 8
Authorization
379