permission required for pfx enrollment using APIs

[La-LaS]

Hello,

getting the below error when trying to enroll a pfx using APIs. I want to know what permissions are needed for pfx creation? i am using a domain account. Can you please help? Thanks.

{
  "ErrorCode": "0xA0140002",
  "Message": "Either enrollment pattern 'Server_Auth_Web_Server_AD_Enroll (Server_Auth_Web_Server_AD_Enroll-xyz.abcd.com)' is not configured for enrollment type 'PFX_ENROLLMENT', or user 'NA\\la_la' does not have permissions to use this pattern for enrollment."
}