Initially, there will be no connection to CB-AT. All new users need to be created in the CertifierOS. The SM of each CB is granted these rights.