Create a user
Partners and enterprises often use subaccounts to separate access for different departments, teams, or customers. Creating users allows you to give people access to DigiCert ONE while maintaining clear boundaries between partner-level administration and subaccount management.
When you create a user, you must choose an account scope that determines what the user can access. Users can be granted access to:
The primary partner account and all current and future subaccounts,
or Only specific subaccounts
This decision affects account boundaries, customer access, and ongoing visibility. Choose the scope carefully based on what the user needs to manage.
For creating and managing subaccounts in CertCentral, refer to CertCentral subaccount management.
Tip
To perform this action, you must have the Partner admin user role or a custom role that contains one or both of the following permissions:
Manage users: Required to create standard users.Manage partner users: Required to add partner users.
User types
For user creation, the key distinction is the account scope you assign to the user. The account scope determines which accounts the user can access and manage. The following user types describe the two most common account scopes used by partners and enterprises.
Partner account user
Partner account users are typically employees of a partner organization or a top-level enterprise organization who need access across accounts.
They can:
Access the primary partner or top-level enterprise account
Manage subaccounts
Work across all current and future subaccounts
Belangrijk
When creating this user:
Select All accounts, including accounts added in the future in step 6 of user creation.
Subaccount user
Subaccount users are typically customers or internal teams who manage a specific organization or department.
They can:
Access their assigned subaccount
Manage certificates, workflows, and integrations within that subaccount
Not access the primary partner or top-level enterprise account or other subaccounts
Belangrijk
When creating this user:
Select Specific accounts and assign them to specific subaccounts in step 6 of user creation.
To create a user
In the Managers () menu, select Account.
In the Account menu, go to Access.
Select Add user.
Enter the user's details:
Name
Email address
Username
Optional: Phone number
Select the default Language for the user's account.
In the Account access rights section, specify the user's scope by selecting one of the following:
To assign the user to a specific subaccount, select Specific accounts.
To assign the user to the primary partner account and all subaccounts, select All accounts, including accounts added in the future.
Assign the user to one or more DigiCert ONE managers.
Select Next.
Select the user roles for each manager the user is assigned to.
Tip
Assign only the roles required for the user’s tasks. If needed, user roles can be updated later. See update user roles.
Select Add user.