Key Permissions on Groups

CADP for .NET Core allows you to perform crypto operations based on the key permissions set on the groups on the CipherTrust Manager.

Supported operations

User groups can be granted permissions to perform the following operations with a particular key:

• Encrypt

• Decrypt

• Sign

• Verify

Steps to perform on CipherTrust Manager

1. Create a user on the CipherTrust Manager.

2. Assign the created user to the user-defined or system-defined group. For details, refer to Assign a User to a Group.

3. Create a key and set key permissions. Key permissions act at the group level. User groups can be granted permissions to perform the supported operations.

Crypto operations on client application

After fetching the key, the client application allows or restricts any crypto operations using that key based on the permissions granted to the groups on that key.

If a user tries to perform any operation other than the allowed one using that key, the access denied error appears.