Administrative roles for the BlackBerry Device Service

The BlackBerry Device Service includes preconfigured administrative roles that you can assign to user accounts to permit users to manage and make changes to the BlackBerry Device Service, user accounts, and BlackBerry devices. Each role is designed for a different type of administrator, and is associated with a different combination of permissions. The table below details the permissions that are associated with each role.

To meet the needs of your organization's environment, you can change the permissions that are associated with the preconfigured roles or you can create custom roles. For more information about how to change or create roles, visit www.blackberry.com/go/serverdocs to read the BlackBerry Device Service Administration Guide.

When you use the BlackBerry Enterprise Service 10 User Administration Tool to perform an administrative task, you use login parameters to specify the administrator account that you want to use to run the command. Before you run a command, you must verify that the administrator account is assigned a role with the required permissions for that command. For example, if you want to use the tool to remove a user account from a BlackBerry Device Service, you must specify an administrator account that is assigned a role with the "Delete a user" and "View a user" permissions.

For more information about the permissions that are required to run each command, see Parameters for the BlackBerry Enterprise Service 10 User Administration Tool.

Permission name

Security role

Enterprise Administrator

Senior Helpdesk role

Junior Helpdesk role

Server only role

User only role

User and device group

Create a group

X

X

X

   

X

Delete a group

X

X

     

X

View a group

X

X

X

X

 

X

Edit a group

X

X

X

X

 

X

Create a user

X

X

X

   

X

Delete a user

X

X

X

   

X

View a user

X

X

X

X

 

X

Edit a user

X

X

X

X

 

X

View a device

X

X

X

X

 

X

Edit a device

X

X

X

X

 

X

View device activation settings

X

X

X

X

 

X

Edit device activation settings

X

X

X

X

 

X

Create an IT policy

X

X

     

X

Delete an IT policy

X

X

     

X

View an IT policy

X

X

X

X

 

X

Edit an IT policy

X

X

     

X

Import an IT policy

X

X

     

X

Export an IT policy

X

X

   

X

Resend data to devices

X

X

X

   

X

Create a software configuration

X

X

     

X

View a software configuration

X

X

X

X

 

X

Edit a software configuration

X

X

     

X

Delete a software configuration

X

X

     

X

Create an application

X

X

     

X

View an application

X

X

X

X

 

X

Edit an application

X

X

     

X

Delete an application

X

X

     

X

Create an administrator user

X

     

Add or remove to user configuration

X

X

X

   

X

Import or export users

X

X

X

   

X

Import user updates

X

X

     

X

Assign the current device to a user

X

X

X

X

 

X

Delete all device data and remove device

X

X

X

X

 

X

Delete only the organization data and remove device

X

X

X

X

 

X

View associated BlackBerry Device Service

X

X

X

X

 

X

Override associated BlackBerry Device Service

X

X

X

   

X

View a directory source

X

X

   

X

 

Edit a directory source

X

X

   

X

 

View user authentication

X

         

Create an email profile

X

X

     

X

Edit user authentication

X

         

Delete an email profile

X

X

     

X

View an email profile

X

X

X

X

 

X

Edit an email profile

X

X

     

X

Create a SCEP profile

X

X

     

X

Delete a SCEP profile

X

X

     

X

View a SCEP profile

X

X

X

X

 

X

Edit a SCEP profile

X

X

     

X

Create a proxy profile

X

X

     

X

Delete a proxy profile

X

X

     

X

View a proxy profile

X

X

     

X

Edit a proxy profile

X

X

     

X

View device enterprise authentication

X

X

     

X

Edit device enterprise authentication

X

X

     

X

Delete device enterprise authentication

X

X

     

X

View device backup encryption keys

X

         

Edit device backup encryption keys

X

         

Specify an activation password

X

X

X

X

 

X

Generate an activation email

X

X

X

X

 

X

Import new users

X

X

     

X

Topology group

View a server

X

X

   

X

 

Edit a server

X

X

   

X

 

View a component

X

X

   

X

 

Edit a component

X

X

   

X

 

View an instance

X

X

   

X

 

Edit an instance

X

X

   

X

 

Change the status of an instance

X

X

   

X

 

Edit an instance relationship

X

X

   

X

 

View a job

X

X

     

X

Edit a job

X

X

     

X

View default distribution settings for a job

X

X

     

X

Edit default distribution settings for a job

X

X

     

X

Manage deployment job tasks

X

X

X

   

X

Change the status of a job task

X

X

     

X

Delete an instance

X

X

   

X

 

Edit license keys

X

X

   

X

 

View license keys

X

X

   

X

 

View reconciliation event status

X

X

X

X

X

X

View SMTP configuration

X

X

   

X

 

Edit SMTP configuration

X

X

   

X

 

View rules for the BlackBerry MDS Connection Service

X

X

X

X

 

X

BlackBerry Administration Service setup group

Create a role

X

     

Delete a role

X

       

View a role

X

X

     

X

Edit a role

X

       

Add or remove a role

X

     

View BlackBerry Administration Service software management

X

X

   

X

 

Edit BlackBerry Administration Service software management

X

X

       

Import or export groups within roles

X

         

View BlackBerry Administration Service certificate management

X

         

Edit BlackBerry Administration Service certificate management

X

         

Organizations group

View an organization

X

X

X

X

 

X

Edit an organization

X

X

       


Was this information helpful? Send us your comments.