For the latest version, please use Certificate Lifecycle Manager 6.9.0! Required API Permissions (No permissions required)