Roles and Permissions

The following server roles must be installed or configured; all the related actions described below must be executed by a member of the Domain/Enterprise Administrator group:

• Active Directory Domain Services (ADDS) administrator
• Active Directory Certificate Services (ADCS) administrator
• Certificate Enrollment Policy Web Service (CEP) administrator
• Certificate Enrollment Web Service (CES) administrator