The API groups available under Administration tile are specifically related to NGINX API endpoints and are intended solely for certificate management operations within the NGINX console.

As such, they are not applicable to the broader Distributed Cloud Console and will not meet customers custom role requirements. At this time, the available Roles and API groups do not provide a permission set that is exclusively scoped to certificate-related operations.