-**Role:** Authorized to **manage certificate lifecycle operations**, including approvals and revocations.
-**Role:** Authorized to **manage certificate lifecycle operations**, including approvals and revocations.
-**Responsibilities:**
-**Responsibilities:**
- Configure **PKI profiles, policies, and security parameters**.
- Configure **PKI profiles, policies, and security parameters**.
@@ -395,9 +393,8 @@ PKI products users' roles and responsibilities can be:
- Ensure that **certificate issuance and revocation processes** align with organizational policies.
- Ensure that **certificate issuance and revocation processes** align with organizational policies.
- Collaborate with the **PKI Administrator** to maintain the integrity of the PKI system.
- Collaborate with the **PKI Administrator** to maintain the integrity of the PKI system.
---
### 4. **PKI Auditor**
**PKI Auditor**
-**Role:** Authorized to **monitor and review PKI operations** to ensure compliance and security.
-**Role:** Authorized to **monitor and review PKI operations** to ensure compliance and security.
-**Responsibilities:**
-**Responsibilities:**
- Access and **review audit logs** to detect anomalies or policy violations.
- Access and **review audit logs** to detect anomalies or policy violations.
@@ -406,9 +403,7 @@ PKI products users' roles and responsibilities can be:
- Identify and report **potential security risks or non-compliance issues**.
- Identify and report **potential security risks or non-compliance issues**.
- Ensure **transparency and accountability** in PKI operations.
- Ensure **transparency and accountability** in PKI operations.
---
**PKI End User**
### 5. **PKI End User**
-**Role:** Individuals or systems that **request certificates** or **check certificate status** for authentication, encryption, or digital signing purposes.
-**Role:** Individuals or systems that **request certificates** or **check certificate status** for authentication, encryption, or digital signing purposes.
-**Responsibilities:**
-**Responsibilities:**
- Submit **certificate signing requests (CSRs)** to the PKI system.
- Submit **certificate signing requests (CSRs)** to the PKI system.