Understand account management responsibilities
Account provisioning, authentication, two-factor authentication, sign-in methods, user and service user management, role assignment, and API credential lifecycle are provided by Account Manager.
See Secure configuration guide for account management.
Private CA's responsibilities are limited to:
Accepting and validating sessions and API credentials issued by Account Manager
Enforcing Private CA product roles and permissions on every request
Rejecting requests without a valid Account Manager-issued session or API credential
Recording product activity in Private CA audit logs
When you create an automated integration with Private CA, create a dedicated Service user in Account Manager for that integration. A service user has API access only and cannot sign in interactively. Do not use a person's account or credentials for a shared integration.