New Post: Least privileged user

Hi,

I'm using PSPKI v3.2.6
I'm trying to retrieve the issued certificates remotely. When I'm doing this with a regular AD user I get this error:

Get-IssuedRequest : Exception calling "GetSchema" with "0" argument(s): "Specified Certification Authority 'XXXXXXXXXX' is unavailable."
At C:\scripts\CertScript.ps1:10 char:76

• $certarray = Get-CertificationAuthority -ComputerName XXXXXXXXXX | Get-I ...
• ~~~~~
  
  • CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
  • FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-IssuedRequest
    

The powershell command in question is the following:
Get-CertificationAuthority -ComputerName <CA FQDN> | Get-IssuedRequest -Property UPN,CertificateTemplate

If I'm local admin on the CA machine, this works remotely without problems.
The question is: What are the minimum permissions I should give to my user to make this work?

Thank you,
Zoltan