Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Documentation for Administrators  >  BlackBerry Enterprise Server Express  >  BlackBerry Enterprise Server Express for Microsoft Exchange  >  Administration Guide - BlackBerry Enterprise Server Express for Microsoft Exchange - 5.0.1

Administrative roles

You assign roles to administrator accounts so that you can control who can perform tasks on the BlackBerry® Enterprise Server Express.

Each role consists of a set of permissions which specify the information that administrators can view and the tasks that they can perform using the BlackBerry Administration Service. The roles do not apply to tasks that an administrator can perform using the BlackBerry Configuration Panel.

You can assign multiple roles to administrator accounts. If you assign multiple roles to an administrator account, the administrator is assigned all the permissions that are turned on for all the roles. For example, if your organization includes various types of administrators, you can create roles for junior administrators and help desk administrators, and assign both of those roles to administrator accounts so that senior administrators have permissions for both roles.

You can also assign roles to groups and add administrator accounts to the groups. When you add an administrator account to one or more groups, you can manage role permissions at a group level instead of at an individual level. If the group contains BlackBerry device users, the roles are also assigned to the BlackBerry device users and the users become administrators.

Preconfigured administrative roles

The BlackBerry® Enterprise Server Express installation includes preconfigured administrative roles. Each preconfigured administrative role contains multiple permissions that are turned on.

Permission name

Security role

Enterprise role

Senior Helpdesk role

Junior Helpdesk role

Server only role

User only role

Create a group

X

X

X

   

X

Delete a group

X

X

     

X

View a group (across Group)

X

X

X

X

 

X

Edit a group (across Group)

X

X

X

   

X

Create a user

X

X

X

   

X

Delete a user

X

X

X

   

X

View a user (across Group)

X

X

X

X

 

X

Edit a user (across Group)

X

X

X

   

X

View a device (across Group)

X

X

X

X

 

X

Edit a device (across Group)

X

X

X

X

 

X

View device activation settings

X

X

     

X

Edit device activation settings

X

X

     

X

Create an IT policy

X

X

     

X

Delete an IT policy

X

X

     

X

View an IT policy

X

X

X

X

 

X

Edit an IT policy

X

X

     

X

Import an IT policy

X

X

     

X

Export a data file

X

X

   

X

X

Create a user-defined IT policy template

X

X

     

X

Delete a user-defined IT policy template

X

X

     

X

Edit a user-defined IT policy template

X

X

     

X

Import an IT policy template

X

X

     

X

Create a software configuration

X

X

     

X

View a software configuration

X

X

X

X

 

X

Edit a software configuration

X

X

     

X

Delete a software configuration

X

X

     

X

Create an application

X

X

     

X

View an application

X

X

X

X

 

X

Edit an application

X

X

     

X

Delete an application

X

X

     

X

Create an administrator user

X

X

     

X

Specify an activation password

X

X

X

X

 

X

Generate an activation email

X

X

       

Assign the current device to a user

X

X

       

Turn off and on external services

X

X

X

   

X

Clear activation password

X

X

X

X

 

X

Clear synchronization backup data

X

X

X

   

X

Clear user statistics

X

X

X

X

 

X

Reset user field mapping

X

X

X

   

X

Turn on redirection

X

X

X

   

X

Turn off redirection

X

X

X

   

X

Refresh available user list from company directory

X

X

X

 

X

X

View a server

X

X

   

X

 

Edit a server

X

X

   

X

 

View a component

X

X

   

X

 

Edit a component

X

X

   

X

 

View an instance

X

X

   

X

 

Edit an instance

X

X

   

X

 

Change the status of an instance

X

X

   

X

 

Edit an instance relationship

X

X

   

X

 

View a job

X

X

     

X

Edit a job

X

X

     

X

View default distribution settings for a job

X

X

     

X

Edit default distribution settings for a job

X

X

     

X

Update peer-to-peer encryption key

X

X

   

X

 

View job distribution settings

X

X

     

X

Edit job distribution settings

X

X

     

X

Delete an instance

X

X

   

X

 

Edit license keys

X

X

   

X

 

License key view

X

X

   

X

 

Manually fail a job

X

X

     

X

Clear instance statistics

X

X

   

X

 

Clear statistics for a BlackBerry MDS Connection Service instance

X

X

   

X

 

View push rules for the BlackBerry MDS Connection Service

X

X

X

X

X

X

View pull rules for the BlackBerry MDS Connection Service

X

X

X

X

 

X

Send message (across Group)

X

X

X

X

 

X

Delete a role

X

       

X

View a role

X

X

     

X

Edit a role

X

       

X

Add and remove a role (across Group)

X

X

     

X

View a group across organizations

           

Edit a group across organizations

           

Add and remove a role across organizations

           

View a device across organizations

           

Edit a device across organizations

           

Register an event notification

           

Create an event notification

           

Edit a BlackBerry Administration Service timer

           
Next topic: Create an administrator account
Previous topic: Creating administrator accounts

Was this information helpful? Send us your comments.