Account Manager user roles

Assign one or more roles to an Account Manager user when you add or update the user.

Account roles for standard and service users

For DigiCert ONE cloud customers, these roles are available in your account.

Account admin

Primary admin and point of contact for managing account setup and user access.

Category	Permission	User can
Accounts and organizations	Manage accounts	View and modify account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	Manage organizations	View and modify organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	View users	Can view details of all users in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
General	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

User manager

Admin who manages user access and permissions.

Category	Permission	User can
Accounts and organizations	View accounts	View account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign in requirements. Integrations.
Accounts and organizations	View organizations	View organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage users	View details for all users, accounts, and organizations. Modify, create, or delete standard or service users. Create service users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
General	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Account user

DigiCert® Account Manager Account user is a basic user that can view account, organization, and user information but primarily works in other DigiCert ONE managers.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	View users	Can view details of all users in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.

Default user

Basic user for accessing other DigiCert One Manager services.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign in requirements. Integrations.
User management	View users	View list of all users and their permissions in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.

View only

Auditor and executive read-only access to account and user data.

Category	Permission	Description
Accounts and organizations	View accounts	View account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign in requirements. Integrations.
Accounts and organizations	View organizations	View organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	View users	View list of all users and their permissions in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
General	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

System roles for on-premises administration

For customers with DigiCert ONE installed on-premises, these roles are available for system administration.

Platform admin

Superadmin responsible for overseeing licensing, configuring the platform, and delegating account setup and user access functions.

Category	Permission	User can
Accounts and organizations	Manage accounts	View and modify account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	Manage organizations	View and modify organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users Manage system users	View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	Manage license	View and update licenses for the account.
	Manage notifications	Manage notification settings in Notification service.
	Manage system settings	View and update platform settings such as: OAuth Integrations Sign-in methods Licenses
	View app health	View app health (API).
	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

System admin

Admin responsible for day-to-day management of account setup and user access.

Category	Permission	Description
Accounts and organizations	Manage accounts	View and modify account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	Manage organizations	View and modify organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users Manage system users	View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View license	View licenses for the account.
	Manage notifications	Manage notification settings in Notification service.
	View system settings	View platform settings such as: OAuth Integrations Sign-in methods Licenses
	View app health	View app health (API).
	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Security officer

Support team member who helps users with account setup and user access.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Integrations.
User management	View account users View system users	Can view details of all users in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View app health	View app health (API).
	View system settings	View platform settings such as: OAuth Integrations Sign-in methods Licenses
	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Fulfillment

DigiCert® Account Manager Fulfillment team role to create accounts and account-scope users.

Category	Permission	User can
Accounts and organizations	Manage accounts	View and modify account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	Manage organizations	View and modify organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users	View, modify, create, or delete account scope (AS) standard or service users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Support admin

Support team member who helps users with account setup and user access.

Category	Permission	User can
Accounts and organizations	Manage accounts	View and modify account details, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	Manage organizations	View and modify organizations details, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users Manage system users	View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View license	View licenses for the account.
	View app health	View app health (API).
	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

User admin

Service desk representative who manages user access and permissions.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users Manage system users	View, modify, create, or delete account scope (AS) standard or service users, as well as system scope (SS) users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View license	View licenses for the account.
Settings & others	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Account user admin

Service desk representative who manages access and permissions for account-scope users.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Organization status. Account associated with the organization. Organization name, address, and telephone number. Contacts associated with the organization.
User management	Manage account users	View, modify, create, or delete account scope (AS) standard or service users.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

System auditor

Admin who monitors systems and applications for policy and compliance.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Integrations.
User management	View account users View system users	Can view details of all users in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View license	View licenses for the account.
	View system settings	View platform settings such as: OAuth Integrations Sign-in methods Licenses
	View app health	View app health (API).
	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.

Read only

Auditor and executive read-only access to account and user data.

Category	Permission	User can
Accounts and organizations	View accounts	View account information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Features that can be enabled for the different DigiCert ONE managers. Integrations.
Accounts and organizations	View organizations	View organization information, such as: Account status. Organizations associated with the account. Licenses allocated and remaining. Sign-in requirements. Integrations.
User management	View account users View system users	Can view details of all users in the account.
User management	Default	View their own user profile and generate their own API key and client authentication certificate in DigiCert ONE.
Settings & others	View app health	View app health (API).
Settings & others	View logs	View DigiCert® Account Manager audit logs regarding actions that occur in your account, including but not limited to who logged in and what users or credentials were created.