Roles and Permissions

The following server roles must be installed or configured; all the related actions described below must be executed by a member of the Domain/Enterprise Administrator group:

  • Active Directory Domain Services (ADDS) administrator

  • Active Directory Certificate Services (ADCS) administrator

  • Certificate Enrollment Policy Web Service (CEP) administrator

  • Certificate Enrollment Web Service (CES) administrator