accessRights

Allow or deny an Active Directory group from enrolling and autoenrolling certificates issued against a template.