You are here: Preparing the Certification Authority > Using Intel SCS with a Microsoft CA > Required Permissions on the CA

# Required Permissions on the CA

These permissions are required on the CA by the user account running Intel SCS component doing the configuration:

- Issue and Manage Certificates
- Request Certificates

For an Enterprise root CA you also need to grant this user account the Read and Enroll permissions on the templates you want to select in the configuration profiles.