Common requirements/misconfigurations for all the Escalations – CA grants normal/low-privileged users enrollment rights – Manager approval is disabled – Authorization signatures are not required – The target template grants normal/low-privileged users enrollment rights