Operations
list
Retrieving details on a range of requests.
Default ACIs
allow (list) group="Certificate Manager Agents"
Only Certificate Manager Agents can list requests.
certServer.ca.request.enrollment
Allow or deny a submit, read, execute, assign, or unassign operation for enrollment
requests.
Operations
submit
Submitting an enrollment request.
read
Viewing an enrollment request.
execute
Modifying the approval state of a request.
assign
Assigning a request to a Certificate Manager Agent.
unassign
Changing the assignment of a request.
Default ACIs
allow (submit) user="anybody"
allow (read,execute,assign,unassign) group="Certificate Manager
Agents"
Anyone can submit an enrollment request; only Certificate Manager Agents can
read or execute enrollment requests.
certServer.ca.request.profile
Allow or deny an approve or read operation for certificate profile-based requests.
ACL Reference
Chapter 8
Authorization
357