Instead of changing the role of a user with Limited access, grant the user access to a specific order or issued certificate.
Note: The "limited" user role can only see certificates that they have ordered. To allow a "restricted" admin, manager, financial manager, or standard user to manage the order, you can add them to the division (see 1.1 Unrestricted versus Restricted).
While the certificate order is active, you can add users.
In your CertCentral account, in the sidebar menu, click Certificates > Orders.
On the Orders page, use the drop-down lists, search box, and column headers and advanced search features to find the order that you need to grant the limited user access to.
In the Order # column, click the Quick View link of the certificate order to which you want to add additional user access.
In the Order # details pane, in the Order Details section under User Access, click the Grant Additional Access link.
In the drop-down list, select the limited users you want to be able access to the certificate order.
Click Save.
You can only add users while the certificate request is pending. Once the order has been issued, the limited user will have permission to access the certificate order, allowing them to download the certificate, renew the certificate, and to perform other certificate related actions.
In your CertCentral account, in the sidebar menu, click Certificates > Request.
On the Requests page, use the drop-down lists, search box, and column headers and advanced search features to find the request that you need to grant the limited user access to.
In the Order # column, click the order number link of the certificate request you want to add additional user access to.
In the Order number details pane, click the Edit link.
On the Edit Request page, expand Additional Order Options.
Click in the Additional users who can manage order box and select the limited users that need access to manage the certificate order.
Under Certificate Services Agreement, read through the agreement and then check I agree to the Certificate Services Agreement above.
Click Update Certificate Request.