AWS::PCAConnectorAD::TemplateGroupAccessControlEntry AccessRights

Allow or deny permissions for an Active Directory group to enroll or autoenroll certificates for a template.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "AutoEnroll" : String,
  "Enroll" : String
}

YAML

  AutoEnroll: String
  Enroll: String

Properties

AutoEnroll

Allow or deny an Active Directory group from autoenrolling certificates issued against a template. The Active Directory group must be allowed to enroll to allow autoenrollment

Required: No

Type: String

Allowed values: ALLOW | DENY

Update requires: No interruption

Enroll

Allow or deny an Active Directory group from enrolling certificates issued against a template.

Required: No

Type: String

Allowed values: ALLOW | DENY

Update requires: No interruption