Device Trust Manager user permissions

Assign one or more Device Trust Manager permissions when you create a custom role.

Account permissions for standard and service users

The following permissions are available in your account:

Permission	User can
Manage alert policies	Configure and apply anomaly detection policies. Update and close alerts when detected and addressed.
View alert policies	View detected alerts.

Permission	User can
Manage artifacts	Create artifacts.
View artifacts	View artifacts.Create an artifact-old

Permission	User can
Manage authentication policies	View, create, add credentials, enable, and disable authentication policies.
View authentication policies	View authentication policies.

Permission	User can
Manage cloud platform policy	Choose any cloud platform for your connected product; Device Trust Manager works with any environment.
View cloud platform policy	View connected cloud platform.

Permission	User can
Manage deployments	Create and abort deployments.
View deployments	View deployments.
Device management	View, register, update, and disable devices. View, create, update, clone, enable, and disable device groups.
View devices	View devices.
View device groups	View device groups.

Permission	User can
Manage devices	View, register, update, and disable devices.
Manage device groups	View, create, update, clone, enable, and disable device groups.
Manage download bootstrap configurations	Download bootstrap configuration file.
Manage download device certificates	Download device certificates.
Manage register many devices	Register multiple devices.
Manage register single device	Register a single device.

Permission	User can
Manage DigiCert Gateway	Configure and manage a DigiCert Gateway for outbound/inbound Device Trust Manager network traffic.
View DigiCert Gateway	View DigiCert Gateway.

Permission	User can
Manage dashboard	Update the Device Trust dashboard.
Manage divisions	View, create, update, assign users, remove users, enable, and disable divisions.Division
View divisions	View divisions.Division
Manage notifications	Enable or disable notifications for specific actions.
Manage reports	View, create, and download reports.
View reports	View reports.
View licenses	View licenses for the account.
View audit log	View audit and signature logs in the account.

Permission	User can
Manage job creation - Batch certificate issuance	Batch device registration simplifies the process of enrolling multiple devices under a single certificate management policy. By submitting one API request to initiate a device batch job, you can efficiently register all the devices in a single operation. Provide the required details for each device, and Device Trust Manager handles all of the registrations at once.
Manage job creation - Deployment	Request certificates in bulk for devices by choosing a device group and selecting a certificate management policy. After uploading the list of certificate requests, certificates will be generated and automatically linked to the corresponding existing device records.
Manage job creation - Register many devices	Register multiple devices by uploading a device list and choosing a certificate management policy that meets your needs. Each device record will be automatically set up with a bootstrap certificate credential. This feature requires an Advanced license.

Permission	User can
Manage releases	Create releases.
View releases	View releases.

Permission	User can
Manage CA connector	Integrate CAs and remove CAs.
Manage certificates	View, request, renew, download, and revoke certificates.
Manage request certificates	Request new certificates.
Manage approve certificate request	Approve certificate requests.
Manage certificate management policy	View and create certificate management policies.
Manage certificate profiles	View, create, enable, disable, delete, and undelete certificate profiles.
View certificate profiles	View certificate profiles.
Manage renew certificates	Renew expiring certificates.
Manage request certificates	View, create, approve, and deny certificate requests.
Manage revoke certificates	Revoke certificates.
Manage issuing CAs	Specify which CAs can issue certificates.
Manage OCSP groups	Manage OSCP groups.
Manage trust bundles	View, create, update, add and remove certificates, delete, enable, disable, download, and get download URL certificate trust bundles.
Manage unmanaged intermediate CAs	Manage unmanaged intermediate CAs.
View certificate management policy	View certificate management policies.
View certificate templates	View certificate templates.
View issuing CAs	View issuing CAs.
View trust bundles	View certificate trust bundles.
View unmanaged intermediate CAs	View unmanaged intermediate CAs.

For on-premises customers, these permissions are available for custom user roles used for system administration.

Permission	User can
View alert policies	View detected alerts.

Permission	User can
View artifacts	View artifacts.Create an artifact-old

Permission	User can
View authentication policies	View authentication policies.

Permission	User can
View deployments	View deployments.

Permission	User can
View devices	View devices.
View device groups	View device groups.

Permission	User can
View DigiCert Gateway	View DigiCert Gateway.

Permission	User can
View job details	View jobs.

Permission	User can
View releases	View releases.

Permission	User can
Manage dashboard	Update the Device Trust dashboard.
Manage notifications	Enable or disable notifications for specific actions.
View app Health	View app health (API).
Manage divisions	View, create, update, assign users, remove users, enable, and disable divisions.Division
View divisions	View divisions.Division
Manage licenses	Update licenses for the account.
View licenses	View licenses for the account.
Manage reports	View, create, and download reports.
View reports	View reports.
Manage settings	Update account settings.
View audit log	View audit and signature logs in the account.

Permission	User can
View certificate	View certificates.
View certificate management policy	View certificate management policies.
View certificate profiles	View certificate profiles.
View certificate templates	View certificate templates.
View issuing CAs	View issuing CAs.
View OCSP groups	View OSCP groups.
View trust bundles	View certificate trust bundles.
View unmanaged intermediate CAs	View unmanaged intermediate CAs.