Re: [Ejbca-develop] Delegation with Administrator Roles

[Michael S. <mi...@st...>]

Tomas Gustavsson wrote:
> An ra admin can issue certificates for the CAs and profiles he have access to, not others. 

Sorry for nitpicking here:
The problem is that if CAs and/or end entity profiles of the RA admin's cert
and the new cert differ you have to give at least view rights to the RA
admin's CA and EE profile.

Ciao, Michael.