Key Permissions on Groups
CADP for .NET Core allows you to perform crypto operations based on the key permissions set on the groups on the CipherTrust Manager.
Supported operations
User groups can be granted permissions to perform the following operations with a particular key:
Encrypt
Decrypt
Sign
Verify
Steps to perform on CipherTrust Manager
Create a user on the CipherTrust Manager.
Assign the created user to the user-defined or system-defined group. For details, refer to Assign a User to a Group.
Create a key and set key permissions. Key permissions act at the group level. User groups can be granted permissions to perform the supported operations.
Crypto operations on client application
After fetching the key, the client application allows or restricts any crypto operations using that key based on the permissions granted to the groups on that key.
If a user tries to perform any operation other than the allowed one using that key, the access denied error appears.
