Assign one or more roles to an Account Manager user when you add or update the user.
The following user roles are available in your account:
Primary admin and point of contact for managing account setup and user access.
Category | Permission | User can |
---|---|---|
Accounts and organizations | Manage accounts | View and modify account details, such as:
|
Manage organizations | View and modify organizations details, such as:
| |
User management | View users | Can view details of all users in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
General | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Admin who manages user access and permissions.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account details, such as:
|
View organizations | View organizations details, such as:
| |
User management | Manage users |
|
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
General | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
DigiCert® Account Manager Account user is a basic user that can view account, organization, and user information but primarily works in other DigiCert ONE managers.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | View users | Can view details of all users in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. |
Basic user for accessing other DigiCert One Manager services.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
User management | View users | View list of all users and their permissions in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. |
Auditor and executive read-only access to account and user data.
Category | Permission | Description |
---|---|---|
Accounts and organizations | View accounts | View account details, such as:
|
View organizations | View organizations details, such as:
| |
User management | View users | View list of all users and their permissions in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
General | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
For partners, these roles are available to you to manage your customer's accounts.
The Partner admin role is used for the primary point of contact for managing a Partner account setup, they are responsible for configuring accounts for their customers and adding users to their own account and customer accounts.
Category | Permission | User can |
---|---|---|
Accounts and organizations | Manage accounts |
|
Manage organizations |
| |
User management | Manage users | View, modify, create, or delete account scope (AS) standard or service users. |
Manage partner users. | View, modify, create, or delete account scope (AS) standard or service users in their customer's accounts. | |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
The DigiCert® Account Manager Read only role is used for partner auditing and executive read-only access to account and user data.
Category | Permission | Description |
---|---|---|
Accounts and organizations | View accounts | View their own account and their customer's account details, such as:
|
View organizations | View details of their own organizations and organizations in their customer's accounts, such as:
| |
User management | View users | View list of all users and their permissions in the account. |
View partner users | View account scope (AS) standard or service users in their customer's accounts. | |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
For on-premises customers, these roles are available for system administration.
Superadmin responsible for overseeing licensing, configuring the platform, and delegating account setup and user access functions.
Category | Permission | User can |
---|---|---|
Accounts and organizations | Manage accounts | View and modify account details, such as:
|
Manage organizations | View and modify organizations details, such as:
| |
User management | Manage account users Manage system users | View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | Manage license | View and update licenses for the account. |
Manage notifications | Manage notification settings in Notification service. | |
Manage system settings | View and update platform settings such as:
| |
View app health | View app health (API). | |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Admin responsible for day-to-day management of account setup and user access.
Category | Permission | Description |
---|---|---|
Accounts and organizations | Manage accounts | View and modify account details, such as:
|
Manage organizations | View and modify organizations details, such as:
| |
User management | Manage account users Manage system users | View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View license | View licenses for the account. |
Manage notifications | Manage notification settings in Notification service. | |
View system settings | View platform settings such as:
| |
View app health | View app health (API). | |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Support team member who helps users with account setup and user access.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | View account users View system users | Can view details of all users in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View app health | View app health (API). |
View system settings | View platform settings such as:
| |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
DigiCert® Account Manager Fulfillment team role to create accounts and account-scope users.
Category | Permission | User can |
---|---|---|
Accounts and organizations | Manage accounts | View and modify account details, such as:
|
Manage organizations | View and modify organizations details, such as:
| |
User management | Manage account users | View, modify, create, or delete account scope (AS) standard or service users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Support team member who helps users with account setup and user access.
Category | Permission | User can |
---|---|---|
Accounts and organizations | Manage accounts | View and modify account details, such as:
|
Manage organizations | View and modify organizations details, such as:
| |
User management | Manage account users Manage system users | View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View license | View licenses for the account. |
View app health | View app health (API). | |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Service desk representative who manages user access and permissions.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | Manage account users Manage system users | View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View license | View licenses for the account. |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Service desk representative who manages access and permissions for account-scope users.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | Manage account users | View, modify, create, or delete account scope (AS) standard or service users. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Admin who monitors systems and applications for policy and compliance.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | View account users View system users | Can view details of all users in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View license | View licenses for the account. |
View system settings | View platform settings such as:
| |
View app health | View app health (API). | |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |
Auditor and executive read-only access to account and user data.
Category | Permission | User can |
---|---|---|
Accounts and organizations | View accounts | View account information, such as:
|
View organizations | View organization information, such as:
| |
User management | View account users View system users | Can view details of all users in the account. |
Default | View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE. | |
Settings & others | View app health | View app health (API). |
View logs | View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created. |