CertCentral role permissions reference
This topic lists the permissions for each CertCentral user role by account type. Use this reference when assigning roles to ensure users have the access they need.
Administrator: Adds or invites users, assigns roles, and manages all access levels.
Finance manager: Manages billing, views account balance, and creates purchase orders, but cannot add notification recipients.
Standard/limited users: Request and monitor certificates based on assigned permissions.
提示
Assign at least one additional Administrator to ensure continuous access and management.
To manage roles: Go to Account > Users to add users or modify roles. See <link to be inserted>.
Subscription and legacy account roles
Permission | Administrator | Finance Manager |
|---|---|---|
Create and manage users | ✓ | — |
Manage account settings | ✓ | — |
Manage divisions | — | — |
Request certificates | ✓ | ✓ |
Approve certificate requests | ✓ | — |
View all orders and requests | ✓ | ✓ |
Manage finances and billing | ✓ | ✓✓ |
Generate spending reports | ✓ | ✓✓ |
Manage audit logs | ✓ | — |
Manage Automation and Discovery | ✓ | — |
Enterprise and Partner account roles
Permission | Administrator | Manager | Finance Manager | Standard User | Limited User |
|---|---|---|---|---|---|
Create and manage users | ✓ | — | — | — | — |
Manage account settings | Unrestricted only | — | — | — | — |
Create and manage divisions | Unrestricted only | — | — | — | — |
Manage organizations and domains | ✓ | ✓ | — | — | — |
Request certificates | ✓ | ✓ | — | — | — |
Approve certificate requests | ✓ | ✓ | ✓ | ✓ | Own orders only |
View all orders and requests | ✓ | ✓ | — | — | — |
Manage finances and billing | ✓ | ✓ | ✓ | ✓ | Own orders only |
Generate spending reports | ✓ | ✓ | ✓ | — | — |
Deposit funds | ✓ | ✓ | ✓ | — | — |
Manage audit logs | ✓ | ✓ | ✓ | — | — |
Manage API access | ✓ | — | — | — | — |
Manage Automation and Discovery | ✓ | ✓ | — | — | — |
View and edit other users | ✓ | ✓ | — | — | — |
Notice
Restricted users are assigned to specific divisions and can only perform actions within those divisions.
Restricted administrators cannot access account-level settings such as Settings > Preferences or Settings > Notifications.