Trying to use self-serve certificate capabilities at 

aaf-onap-test.osaaf.org

to generate policy component certificates. 

while I can play and obtain cerfiticates for other components (clamp and dmaap), I can't for policy.

It seems the first step is to create a policy namespace which currently does not exist, from which we will want to create sub-namespaces (other option if adviced by AAF team is to have multiple separated namespaces).

Currently blocked at provisioning an user and a policy namespace through browser CLI:

https://aaf-onap-test.osaaf.org:8200/gui/home

For example, trying to create namespace, returns error

ns create org.onap.policy owner mmanager@people.osaaf.org

Failed [SVC1403]: Forbidden - [aaf_admin@people.osaaf.org] may not write in NS [org.onap]

It seems that may be similar to other components, appropriate data, needs to be pre-provisioned in cassandra scripts as I see it is done for other components.

Need advice from AAF team on how to move forward on policy side.