Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server Express 5  >  BlackBerry Enterprise Server Express for Microsoft Exchange  >  Administration Guide BlackBerry Enterprise Server Express for Microsoft Exchange - 5.0.2

Managing groups

You can reduce the time that you spend managing user accounts by creating groups of similar user accounts and assigning shared properties, such as software configurations or IT policies, to the group. Properties that you assign to a group are assigned to all user accounts in the group.

You can assign properties to user accounts and administrator accounts at the individual level, group level, or domain level. The BlackBerry® Administration Service applies properties to user accounts and administrator accounts using the following hierarchy:
  • The properties at the individual level override the properties at the group level.
  • The properties at the group level override the properties at the domain level.

After you add a user account or administrator account to a group, you can override the properties that you configured for the account at the group level or domain level by changing the properties at the user account level.

If you remove a user account or administrator account from a group, the account name remains in the global users list but it does not appear in the group list.

You can either create user-specific groups and assign roles to those groups or use the default user groups that contain pre-existing roles.

If you are managing a large number of groups (over 3000) using the BlackBerry Administration Service in a single domain, your organization's environment might experience a performance impact.

Using default groups to manage user accounts and administrator accounts

The BlackBerry® Enterprise Server Express installation includes default groups that have preconfigured administrative roles. You can use the default groups in your organization's environment instead of creating specific administrative groups. Each default group consists of a set of preconfigured rules which specify the information that administrators can view and the tasks that they can perform using the BlackBerry Administration Service.

The default groups ensure users without administrative privileges cannot escalate their permissions, for example, junior administrators cannot escalate their roles to senior administrator roles.

Default group

Description of the default group

Administrators

This is a preconfigured group for BlackBerry Administration Service administrators. This groups has the permissions assigned to the Security role.

Administrators in this group are responsible for ensuring all Junior Helpdesk administrators are added to the Junior Helpdesk group.

Help desk representatives

This is a preconfigured group for help desk administrators. This group has the permissions assigned to the Junior Helpdesk role.

Junior Helpdesk administrators in this group can perform basic administrative tasks such as adding users to groups and assigning BlackBerry devices to BlackBerry device users. The Junior Helpdesk role can only add users to the Web Desktop Users group and the Junior Helpdesk group.

BlackBerry® Web Desktop Manager users

This is a preconfigured group for BlackBerry Web Desktop Manager users. BlackBerry Web Desktop Manager users in this group do not have any BlackBerry Administration Service administrative permissions.

Users in this group can perform basic administrative tasks on their own user account using the BlackBerry Web Desktop Manager such as setting an activation password or locking their BlackBerry device.

Remove a user account from a group

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Group.
  2. Click Manage groups.
  3. Click the group name.
  4. In the Manage users in group membership list, click Remove users from group membership.
  5. Search for a user account.
  6. Select the check box beside the display name for the user accounts that you want to remove.
  7. Click Remove from group membership.

Change the properties of a group

After you create a group, specify the properties that you want to apply to all user and administrator accounts in the group. You can copy the properties from one group to another. When you add user accounts or administrator accounts to a group, the group properties apply to the new accounts automatically.
  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Group.
  2. Click Manage groups.
  3. Click the group name.
  4. Click Edit group.
  5. Switch between the appropriate tabs and make the appropriate changes.
  6. Click Save all.

Rename a group

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Group.
  2. Click Manage groups.
  3. Click the group name.
  4. Click Edit group.
  5. In the Group information section, in the Name field, type a new name for the group.
  6. Click Save all.

Delete a group

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Group.
  2. Click Manage groups.
  3. Click the group name.
  4. Click Delete group.
  5. Click Yes - Delete the group.
Next topic: Managing user accounts
Previous topic: Managing groups and user accounts

Was this information helpful? Send us your comments.