Subaccounts are CertCentral accounts linked to and managed by a top-level 'parent' CertCentral account. Subaccounts let resellers or other organizations give users individual control over a CertCentral account and their certificate management process, while still allowing you, the 'parent' account, to control the product pricing and billing.
Subaccounts are specifically designed for customer-business relationships or other relationships where you need to control the product pricing or billing of orders made by the subaccounts.
Subaccounts are a tool for managing users and organizations that need to have their own "separate" CertCentral account. Subaccounts should be used when you need to control the billing and pricing for an account.
Your account becomes the 'parent' of any subaccount you create with limited management options over the subaccount. Subaccounts manage their own users, user permissions, domains, organizations, certificate orders, etc.
The 'parent' can set certain options, such as:
All other features and account activity, such as the subaccount's users, orders, divisions, domains, and organizations can't be viewed, edited, or controlled by the parent. For example, a 'parent' cannot view or modify the subaccount's users.
There are four types of subaccounts: retail, enterprise, partner, and managed (API-only access). Each account type comes with a different set of CertCentral features available to them.
Managed subaccounts are API-only accounts intended for integration into an existing user portal. They provide the parent with additional controls such as the ability to download certificates.
Divisions are another tool for managing users and organizations. If you want to give customers or users at your organization their own CertCentral login and limit their account access through user permissions, then divisions are the right tool.
You can give divisions as much freedom as you want, controlling their ability to create and manage users, permissions, domains, and organizations. Unlike subaccounts, you have total visibility and control over the users, orders, settings, and activity of divisions in your account.
Each division can have its own funds and pay for only its own certificates.
The main difference between subaccounts and divisions are pricing and billing controls.
Subaccounts can have customized product pricing and product availability. Orders can be billed to the subaccount or to the parent. If you don't need pricing and billing control, you should use divisions.
Use subaccounts if you can answer yes to any of these questions:
Use divisions if you can answer yes to any of these questions: