Business units
Use business units to segment your organization’s certificate issuance and management.
Use any logical or functional segmentation criteria that works best for you, for example to separate physical office locations, teams, or other functional divisions of your company where you want to track or limit certificate issuance volumes or users, or apply different certificate policies and enrollment methods for security reasons.
You can also use business units to split up different types of issuance—one business unit dedicated to BYoD device certificate issuance, another for employee certificates, a third for private server certificates, and so on.
You get a
Default Business Unitwhen you get your account. We recommend that you create your own business units to suit your needs.Each business unit is allocated seats, which determines the maximum number and type of end-entity users and certificates available. You can change seat allocations later if needed.
You can create certificate profiles to meet your business needs. Certificate profiles are assigned to a single business unit and associated to a single issuing CA.
Each business unit can have its own administrators with the appropriate user roles needed to manage the assets in that business unit.