Understand users, roles, and access in DigiCert ONE
DigiCert ONE uses role-based access control (RBAC) to determine who can access products, and what actions they can perform.
Access is based on four key concepts:
Concept | Description |
|---|---|
Users | People who sign in to DigiCert ONE. |
User roles | Collections of permissions that define what users can access and what actions they can perform. DigiCert ONE provides preset roles for common responsibilities, and administrators can create custom roles when additional flexibility is needed. |
Platform administrators | User who is assigned platform admin permission to manage DigiCert ONE at the platform level, including users, authentication, and account settings. |
Solution administrator | User who is assigned an administrative role within a specific product. |
Nota
Platform administrator privileges and solution access are managed independently. Being a platform administrator doesn't automatically grant access to products. To access or administer a product, users, including platform administrators, must be assigned an appropriate role.
Users
Platform administrators manage users and control who can sign in to DigiCert ONE. Common user administration tasks can include:
Create or invite users
Remove users
Provision users from an IdP using SCIM
Assign roles to users or IdP groups
Resend user invites
Reset passwords or two-factor authentication for users, where supported
Users can reset their own password from the sign in workflow. Resetting two-factor authentication requires action from a platform administrator.
User roles
User roles define what users can access and what actions they can perform within a product. DigiCert ONE provides preset roles for common responsibilities, such as administrators, operators, auditors, and signers. If a preset role doesn't meet your organization's needs, platform administrators can create custom roles, by selecting the required permissions.
Permissions
Permissions are the individual capabilities that make up a user role. Permissions aren't assigned directly to users. Instead, platform administrators select permissions when creating or modifying a custom role, then assign that role to users or groups.
Administrative access
DigiCert ONE supports platform-level administration and solution-level administration. All users access DigiCert ONE from the same sign in experience. Administrators don’t use a separate platform. Administration features are available to users with the appropriate platform administrator rights or a solution administrator role.
Platform administrators
Platform administrators manage DigiCert ONE at the platform level. They can:
Create and manage users
Configure authentication and sign-in methods
Manage account-level settings
Assign preset roles
Create and manage custom roles
Assign roles to users and IdP groups
Platform administrator privileges apply only to the DigiCert ONE platform. To access or administer a product, platform administrators must also be assigned an appropriate role.
Product administrators
Product administrators are users who have been assigned an administrative role within a specific product. Depending on their assigned role, they can:
Configure product settings
Manage solution-specific security settings
Perform administrative tasks within that product
Their administrative access is limited to the products where they have been assigned an administrative role. A solution administrator is a user who has been assigned an administrative role within a product:
Product | Admin user role |
|---|---|
DigiCert CertCentral® | |
DigiCert® Private CA | |
Trust Lifecycle Manager | |
Software Trust Manager | |
Content Trust Manager | |
Device Trust Manager |