This section allows an administrator to add or edit the allowed modules to an existing role. 


  1. Click "Access Control" from the left-panel.
  2. Click  to edit a new role. Tick the checkboxes against the allowed modules to add/edit or delete a role. You can also assign modules to a role that have only the read-only rights. 



Following is the list of allowed modules that can be assigned or unassigned to a role:


  • System 
    • Information 
    • Certificate Authority
    • Instances
    • HMAC Report
    • Background Jobs 
  • Configurations
    • General Settings 
    • Default Settings 
    • Device Enrolment 
      • SCEP Protocol
        • SCEP
        • Microsoft Intune SCEP
      • CMP 
      • ACME 
      • EST
    • Windows Enrolment 
    • Application integration 
    • Policy 
    • System Security 
      • Data Security 
      • HMAC Verification 
    • License 
    • Branding
    • Archiving
  • Agreements
    • Subscriber Agreements
    • Service Agreements 
  • Vetting Forms
  • External Services
    • Connectors 
    • Authentication Profiles
    • Certification Profiles
  • Service Plans 
  • Enterprises 
    • Requests
    • Registered
      • Dashboard
      • Profile
        • Organisation Information 
        • Account Owner
    • Approval Requests
      • Invitation Requests
    • Users
      • Registered Users
      • User Invitations
    • Roles
    • Integrations 
      • Enterprise API Keys
      • Signinghub
      • Digital Onboarding 
    • Windows Enrolment 
    • Device Enrolment 
      • SCEP Protocol
        • SCEP
        • Microsoft Intune SCEP
      • CMP 
      • ACME
      • EST
    • Advanced Settings
      • Enterprise Device CA
      • Special Permissions 
      • Domain Configurations 
    • License 
    • Notifications 
      • Certificate Notifications 
      • Request Notes 
  • Users
  • Requests
    • Certificate Requests
    • Renewal Requests
    • Revocation Requests
    • Reissue Requests
  • Certificates
  • Access Control
    • Operators
    • Roles
  • TSP Accounts
  • Logs 
  • Archive Mode


In a fresh installation, new features will be enabled in the default role. But for existing roles, new features will not be enabled, you will have to configure them. 



Once you have completed your selection, click "Save".