Certificates Permissions for Roving Edge Infrastructure

Describes the details for writing user IAM policies that control access to rules for the Certificates service for a Roving Edge Infrastructure device.

Resource-Types

leaf-certificates

leaf-certificates-csr

leaf-certificate-family

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage.

leaf-certificates


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	CERTIFICATE_READ	ViewCertificate ViewCertificateWorkRequest	None
read	CERTIFICATE_READ	ViewCertificate ViewCertificateWorkRequest	None
manage	CERTIFICATE_READ CERTIFICATE_RENEW CERTIFICATE_IMPORT CERTIFICATE_CREATE	ViewCertificate ViewCertificateWorkRequest RenewCertificate ImportCertificate CreateCertificate	None

leaf-certificates-csr


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	CSR_READ	ViewCertificateSigningRequest	None
read	CSR_READ	ViewCertificateSigningRequest	None
manage	CSR_READ CSR_CREATE	ViewCertificateSigningRequest CreateCertificateSigningRequest	None

leaf-certificate-family


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	CERTIFICATE_READ CSR_READ	ViewCertificate ViewCertificate WorkRequest ViewCertificate SigningRequest	None
read	CERTIFICATE_READ CSR_READ	ViewCertificate ViewCertificate WorkRequest ViewCertificate SigningRequest	None
manage	CERTIFICATE_READ CERTIFICATE_RENEW CERTIFICATE_IMPORT CERTIFICATE_CREATE CSR_READ CSR_CREATE	ViewCertificate ViewCertificateWorkRequest RenewCertificate ImportCertificate CreateCertificate ViewCertificateSigningRequest CreateCertificateSigningRequest	None