In cazul authorizarii SSB relatia cu pricina este cea de 'ownership' care se controleaza fie prin clause AUTHORIZATION la crearea obiectului, fie prin ALTER AUTHORIZATION:
CREATE
CERTIFICATE [<certname>] AUTHORIZATION [<ownername>] WITH SUBJECT = '...';
ALTER AUTHORIZATION ON CERTIFICATE::[<certname>] TO [<newowner>];
http://rusanu.com