User roles in customer-hosted private CA
User roles in customer-hosted variant of DigiCert Private CA are optimized for tightly managed offline environments.
User roles for the UI
User roles that can log on to the private CA UI:
Administrator - This user role is meant for account administration and has access to all the features in the private CA. The first user in your account belongs to this category. Only administrators can add and manage other users.
CA Manager - This user role is meant for CA configuration and management and has access to all features except user management.
API users
User roles that can interact with the private CA via REST API:
Issuance - This user role can use all the REST API endpoints available in the customer-hosted environments.