An electronic device (104, 500) comprising: a communication interface; and at least one processor configured to: send an enrollment request to a server to enroll a source entity associated with the electronic device, wherein the enrollment request comprises an identifier of the source entity, a role indicator indicating that the source entity has a source entity role in the enrollment request, and one or more control parameters indicating at least one operable aspect of a vehicle for which transfer of control from the source entity to a target entity is requested; in response to the server verifying: (a) an identity of the source entity based on the identifier of the source entity, and (b) that the source entity has authority to transfer control of said at least one operable aspect, receive, from the server, an enrollment response comprising a policy and a credential of the source entity, wherein the policy comprises policy elements indicating a first set of the at least one operable aspect of the vehicle for which a transfer of control from the source entity to the target entity is allowed; enroll with the server to obtain a credential of the target entity; perform an authentication procedure with another device associated with the target entity via the communication interface using the credential of the source entity; and establish a secure connection with the another device using the credential of the source entity and the credential of the target entity to allow transfer of control of the first set of the at least one operable aspect of the vehicle from the source entity to the target entity. a communication interface; and at least one processor configured to: send an enrollment request to a server to enroll a source entity associated with the electronic device, wherein the enrollment request comprises an identifier of the source entity, a role indicator indicating that the source entity has a source entity role in the enrollment request, and one or more control parameters indicating at least one operable aspect of a vehicle for which transfer of control from the source entity to a target entity is requested; in response to the server verifying: (a) an identity of the source entity based on the identifier of the source entity, and (b) that the source entity has authority to transfer control of said at least one operable aspect, receive, from the server, an enrollment response comprising a policy and a credential of the source entity, wherein the policy comprises policy elements indicating a first set of the at least one operable aspect of the vehicle for which a transfer of control from the source entity to the target entity is allowed; enroll with the server to obtain a credential of the target entity; perform an authentication procedure with another device associated with the target entity via the communication interface using the credential of the source entity; and establish a secure connection with the another device using the credential of the source entity and the credential of the target entity to allow transfer of control of the first set of the at least one operable aspect of the vehicle from the source entity to the target entity. send an enrollment request to a server to enroll a source entity associated with the electronic device, wherein the enrollment request comprises an identifier of the source entity, a role indicator indicating that the source entity has a source entity role in the enrollment request, and one or more control parameters indicating at least one operable aspect of a vehicle for which transfer of control from the source entity to a target entity is requested; in response to the server verifying: (a) an identity of the source entity based on the identifier of the source entity, and (b) that the source entity has authority to transfer control of said at least one operable aspect, (a) an identity of the source entity based on the identifier of the source entity, and (b) that the source entity has authority to transfer control of said at least one operable aspect, receive, from the server, an enrollment response comprising a policy and a credential of the source entity, wherein the policy comprises policy elements indicating a first set of the at least one operable aspect of the vehicle for which a transfer of control from the source entity to the target entity is allowed; enroll with the server to obtain a credential of the target entity; perform an authentication procedure with another device associated with the target entity via the communication interface using the credential of the source entity; and establish a secure connection with the another device using the credential of the source entity and the credential of the target entity to allow transfer of control of the first set of the at least one operable aspect of the vehicle from the source entity to the target entity.