An application can increment the "last serial number issued" (CERTLSER) for a user certificate if the following conditions are met:

1. The caller's user ID is the user ID associated with the certificate.
2. The caller's user ID has at least READ authority to the resource IRR.DIGTCERT.GENCERT in the FACILITY class.