Access permissions

Individual permissions in DigiCert® Account Manager provide granular access to specific Trust Lifecycle Manager features. Access permissions get grouped into user roles, which then get assigned to users.

Select any of the predefined user roles in Account Manager by name to see which individual permissions it includes.
When you create a custom user role in Account Manager, you select specific access permissions to assign to it.

Some permissions allow for either Read-only or Manage (edit) access to the data in question.

Tip

Manage permissions provide both read and edit access. If you assign the Manage version of a particular permission to a custom user role, you cannot also assign the Read-only version of that permission, as it would be redundant.

List of Trust Lifecycle Manager permissions

DigiCert® Account Manager defines the below access permissions for Trust Lifecycle Manager, organized by functional area.

General

Permission	Description
`Business units`	View or manage business units.
`Seats`	View or manage seats.
`Licensed seats`	View or manage seat allocations to business units.
`Logs`	View audit logs.
`License`	View available seat licenses in Account Manager.
`Reports`	View or manage reports.
`SSP Portal config`	Manage the self-service portal.
`Connectors`	View or manage connectors.
`Automation`	Manage certificate lifecycle automation activities/features.
`Client tools`	View or manage client tools.
`Network scans`	View or manage network scans.

Certificate management

Permission	Description
`Certificates`	View certificates and certificate details.
`Create`	Enroll certificates.
`Revoke`	Revoke certificates.
`Renew`	Renew certificates.
`Suspend`	Temporarily disable certificates.
`Resume`	Re-enable suspended certificates.
`Recover`	Recover escrowed certificates.
`Import`	Import certificates from external CAs.
`Manage certificate`	Manage certificates.

Profiles & templates

Permission	Description
`Profile`	View or manage certificate profiles.
`Templates`	View or manage certificate templates.
`Enrollment`	View or manage certificate enrollments.