Thanks for the info
Please checkout this https://hyperledger-fabric.readthedocs.io/en/release-1.4/commands/cryptogen.html which says it is normally not used for production

1. How can we use cryptogen to generate certificates for Intermediate CA’s.
2. Can we set fine-grain permissions lets to say can I create participants with roles as client, admin etc with different affiliations using cryptogen and with different access control attributes.

I think cryptogen is just a simple utility to create crypto material to pre-configure network for testing purposes