Skip to main content

Team Lead (AS)

The DigiCert® Software Trust Manager Team Lead is an account scope (AS) role for managing developers and engineering teams responsible for signing and releasing software.

Permissions

The Software Trust Manager Team Lead role has the following permissions assigned:

Category	Permission	Description
User settings	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Teams	Manage my teams	View, update, deactivate, and map resources to existing teams that they are part of, provided that they have relevant resource permissions.
Audit logs	View audit log	View audit and signature logs in the account.
Audit logs	Export audit logs	Export audit and signature logs in the account. Note `View audit log` is required as an additional permission to be able to export audit logs.
Certificates	Manage certificate hierarchy	View and create hierarchies. They can also activate and deactivate restricted hierarchies.
	View certificate profile	View certificate profiles created by the user.
	View certificate template	View certificate template details in the account.
	Import certificate	Import certificates for keypairs that they are assigned to. Note Users with `Manage keypair` permission can import a certificate to any keypair within the account.
	Revoke certificate	Revoke certificates associated with keypairs that they are assigned to. Note Users with `Manage keypair` permission can revoke certificates associated to any keypair within the account.
	Generate certificate	Create a new certificate using keypairs that they are assigned to. Note Users with `Manage keypair` permission can create a new certificate using any keypair within the account.
	View certificate	View certificate details for all certificates assigned to them. Note Users with `Manage keypair` permission can view all certificates within the account.
Keypairs	Import keypair	Import keypairs into the account. Note To import a GPG secring, `Manage master key` is also required.
	Request keypair export	Request to export keypairs that they are assigned to. Note Users with `Manage keypair` permission can request to export any keypair within the account.
	Approve keypair export	Approve requests to export keypairs that they are assigned to. Note Users with `Manage keypair` permission can approve keypair exports for any keypair within the account.
	Approve keypair delete	Approve requests to delete keypairs that they are assigned to. Note Users with `Manage keypair` permission can approve keypair delete for any keypair within the account.
	Generate keypair	Create a new keypair.
	View keypair	View keypairs and key rotations relying on keypairs assigned to them. Note Users with `Manage keypair` permission can view all keypairs and key rotations within the account.
	Manage keypair	Update, suspend or unsuspend keypairs. Create, update, enable, and disable keypair profiles. Create and update user groups. Create, update, and refresh key rotation. Generate a CSR.
	Manage master GPG key	Create GPG master key, provided that the user also has `Generate keypair` permission. Import a GPG secring, provided that the user also has `Import keypair` permission. Update, suspend, unsuspend master keys that they are assigned to. Note Users with `Manage keypair` permission can update, suspend, unsuspend any master keys within the account. Delete master keys assigned to them, provided that the user also has `Approve keypair delete` permission. Note Users with `Manage keypair` permission can delete any master key within the account. Revoke master keys assigned to them, provided that the user also has `Revoke certificate` permission. Note Users with `Manage keypair` permission can revoke any master key within the account.
Signatures	Sign	Sign software with keypairs assigned to them.
Releases	View release	View all releases in the account.
	Request release	Request to create an offline release.
	Approve release	Create a release and approve or reject requests to create offline releases.
Threat detection	Manage threat detection	Download threat detection reports and assign threat detection scans to projects.

In this section:

Was this helpful?