By default, Everyone has Read permission for the enterprise, and the enterprise administrator (the person who installed the enterprise) has Full Control permission. With Read permission for an enterprise, users can retrieve the enterprise permissions settings and register certificates in the MQIS. In other words, users have Get Permissions and Create User permissions.
When granted Write permission for an enterprise, users can create sites, create CNs, retrieve the enterprise permissions settings, and register certificates in the MQIS. In other words, users have Create Site, Create CN, Get Permissions, and Create User permissions.
You can specify Full Control, Read, Write, or Special Access permissions for all users and groups. You can set the following Special Access permissions for the enterprise.
Table 5.1
| Special Access Permission | Use to allow a user or group to... |
|---|---|
| Create Site (Cs) | Create a site. |
| Create CN (Cc) | Create a connected network. |
| Create User (Cu) | Register certificates in the MQIS. |
| Set Properties (Sp) | Set enterprise properties. This includes creating, modifying, and deleting site links and deleting certificates of other users. |
| Delete Enterprise (D) | Delete the enterprise. |
| Get Permissions (Pg) | View the enterprise permissions. |
| Set Permissions (Ps) | Set the enterprise permissions. |
| Take Ownership (O) | Take ownership of the enterprise. |
Only users who have Full Control for an enterprise can create a PEC in the enterprise. Only users who have the Create Site permission for an enterprise can create a site in the enterprise.