Administration Guide

Administrative roles for the BlackBerry Enterprise Server

The BlackBerry Enterprise Server includes preconfigured administrative roles that you can assign to administrator accounts. Each role is designed for a different type of administrator, and grants different permissions to manage and make changes to the BlackBerry Enterprise Server, user accounts, and BlackBerry devices. The table below details the permissions that are associated with each role.

To meet the needs of your organization's environment, you can change the permissions that are associated with the preconfigured roles, or you can create custom roles. For more information about how to change or create roles, visit www.blackberry.com/go/serverdocs to read the BlackBerry Enterprise Server Administration Guide.

When you use the BlackBerry Enterprise Server User Administration Tool to perform an administrative task, you use login parameters to specify the BlackBerry Administration Service administrator account that you want to use to run the command. Before you run a command, you must verify that the account is assigned a role with the permissions that are required for that command. For example, if you want to use the tool to remove a user account from a BlackBerry Enterprise Server, you must specify an account that is assigned a role with the "Delete a user" and "View a user" permissions.

For more information about the permissions that are required to run each command, see Parameters for the BlackBerry Enterprise Server User Administration Tool.

Permission name

Security role

Enterprise role

Senior Helpdesk role

Junior Helpdesk role

Server only role

User only role

User and device group

Create a group

X

X

X

   

X

Delete a group

X

X

     

X

View a group

X

X

X

X

 

X

Edit a group

X

X

X

X

 

X

Create a user

X

X

X

   

X

Delete a user

X

X

X

   

X

View a user

X

X

X

X

 

X

Edit a user

X

X

X

X

 

X

View a device

X

X

X

X

 

X

Edit a device

X

X

X

X

 

X

View device activation settings

X

X

     

X

Edit device activation settings

X

X

     

X

Create an IT policy

X

X

     

X

Delete an IT policy

X

X

     

X

View an IT policy

X

X

X

X

 

X

Edit an IT policy

X

X

     

X

Import an IT policy

X

X

     

X

Export an IT policy

X

X

   

X

Create a user-defined IT policy template

X

X

     

X

Delete a user-defined IT policy template

X

X

     

X

Resend data to devices

X

X

X

   

X

Edit a user-defined IT policy template

X

X

     

X

Import an IT policy template

X

X

     

X

Create a software configuration

X

X

     

X

View a software configuration

X

X

X

X

 

X

Edit a software configuration

X

X

     

X

Delete a software configuration

X

X

     

X

Create an application

X

X

     

X

View an application

X

X

X

X

 

X

Edit an application

X

X

     

X

Delete an application

X

X

     

X

Create an administrator user

X

     

Add or remove to user configuration

X

X

X

   

X

Export asset summary data

X

X

     

X

Import or export users

X

X

X

   

X

Export statistics

X

X

     

X

Import user updates

X

X

     

X

Assign the current device to a user

X

X

X

X

 

X

Delete all device data and remove device

X

X

X

X

 

X

Delete only the organization data and remove device

X

X

X

X

 

X

Specify an activation password

X

X

X

X

 

X

Turn off and on external services

X

X

X

   

X

Generate an activation email

X

X

X

X

 

X

Clear synchronization backup data

X

X

X

   

X

Clear user statistics

X

X

X

   

X

Reset user field mapping

X

X

X

   

X

Turn on redirection

X

X

X

   

X

Turn off redirection

X

X

X

   

X

Add user from company directory

X

X

X

   

X

Import new users

X

X

     

X

Refresh available user list from company directory

X

X

 

X

 

Edit GroupWise subscription for a user

X

X

X

X

 

X

Import or export email message filters for a user

X

X

     

X

Topology group

View a server

X

X

   

X

 

Edit a server

X

X

   

X

 

View a component

X

X

   

X

 

Edit a component

X

X

   

X

 

View an instance

X

X

   

X

 

Edit an instance

X

X

   

X

 

Change the status of an instance

X

X

   

X

 

Edit an instance relationship

X

X

   

X

 

View a job

X

X

     

X

Edit a job

X

X

     

X

View default distribution settings for a job

X

X

     

X

Edit default distribution settings for a job

X

X

     

X

Update peer-to-peer encryption key

X

X

   

X

 

Manage deployment job tasks

X

X

X

   

X

Change the status of a job task

X

X

     

X

Delete an instance

X

X

   

X

 

Edit license keys

X

X

   

X

 

View license keys

X

X

   

X

 

Clear instance statistics

X

X

   

X

 

Synchronize instance system address book

           

Clear and synchronize instance system address book

           

Import or export email filters

X

X

   

X

 

Clear statistics for a BlackBerry MDS Connection Service instance

X

X

   

X

 

View rules for the BlackBerry MDS Connection Service

X

X

X

X

X

X

BlackBerry Administration Service setup group

Send message

X

X

X

X

 

X

Create a role

X

       

Delete a role

X

         

View a role

X

X

     

X

Edit a role

X

         

Add or remove role

X

         

View BlackBerry Administration Service software management

X

X

   

X

 

Edit BlackBerry Administration Service software management

X

X

       

Import or export groups within roles

X

         

View reporting data

 

X

       

View BlackBerry Monitoring Service information

X

         

Edit BlackBerry Monitoring Service settings

X

         


Was this information helpful? Send us your comments.