An access control entry grants or denies permission to an Active Directory group to enroll certificates for a template.
Use this parameter when paginating results in a subsequent request after you receive a response with truncated results. Set it to the value of the NextToken parameter from the response you just received.
NextToken