User Onboarding
User onboarding ensures that authorized users can access the PKIaaS portal with the correct permissions, certificate visibility, and notification settings. The recommended approach is to first create departments, then add users, assign roles, configure watchers, and finally validate access.
Departments act as the primary access boundary within the portal. Users such as Department PKI Administrators or standard users can only view or manage certificates associated with the departments assigned to them.
1. Create Departments
Create departments based on the customer's business units, application teams, infrastructure teams, or other organizational groups. Departments help organize users and certificates and control which certificate data each team can access.
Navigation: Administration > Departments
- Create departments that match the customer's organizational structure.
- Use clear department names so certificate ownership can be easily identified.
- Associate certificates and users with the appropriate department.
2. Add Users
Add the users who require access to the PKIaaS portal. Users can be created manually or synchronized through Active Directory or the configured Identity Provider.
Navigation: Administration > Users
- Add the user's corporate identity and contact details.
- Confirm that the user has a valid business requirement for portal access.
- Assign the user to the required department or departments.
3. Assign Roles and Permissions
Assign each user the appropriate role based on their responsibilities. Roles determine what activities the user can perform within the portal.
Navigation: Administration > Users > Edit
- Assign the minimum permissions required for the user's role.
- Department administrators can manage certificates within their assigned departments.
- Standard users may have limited permissions such as requesting or viewing certificates.
- Administrative privileges should only be provided where required.
4. Configure Watchers and Notifications
Add watchers to departments or certificates so that responsible users receive notifications for important certificate lifecycle events.
Navigation: Administration > Departments or Inventory
- Configure watchers for certificate expiration and renewal notifications.
- Add certificate owners, PKI administrators, or operational teams as required.
- Use shared team mailboxes where multiple users need to receive the same notifications.
5. Validate User Access
After onboarding is complete, confirm that the user can successfully sign in and has the expected level of access.
- Verify that the user can access the portal.
- Confirm that only the assigned departments and certificates are visible.
- Check that the correct menus and certificate management actions are available.
- Confirm that notifications are being delivered to the appropriate users.