Assign issuing CA to a division
Assign an issuing CA to one or more divisions to limit which division subunits in your account can use the issuing CA in certificate enrollment workflows.
In DigiCert ONE®, in the Manager menu (top right), select DigiCert® IoT Trust Manager.
In the DigiCert® IoT Trust Manager menu, select Certificates > Issuing CAs.
On the Issuing CAs page, find and click the CA you want to assign to a division.
On the Issuing CA details page, in the Divisions using this CA section, select 1 or more divisions you want to have exclusive use of the issuing CA.
Click Assign CA to divisions.
The issuing CA is available only to objects and users that have permission for the divisions the CA is assigned to.