4.2.
Using the Client Membership Service
Up one level
Membership Service
Before the membership service can be used, at least one person must be given the manager role, which permits them to create new membership groups.
To give someone the manager role on the service:
Go to the main page (https://<servername>:8443/gria-client-mgt).
Click on the Membership Service link.
In the access control table at the bottom of the page, choose Subject DN is ... and click Add:

Upload the certificate for the manager you wish to add into the form. Grant them the manager role. See the PBAC administrator's guide for more details about setting access control rules.
Managers can now create new membership groups, to which they can add users, as described in Managing users and suppliers.
