Using instance level access control
You can use instance level access control to control what data the BlackBerry® Pushcast™ Software can process. When BlackBerry Pushcast Software users access a certain function in the BlackBerry Pushcast Software through their role assignment (for example, Run Report A), instance level access control determines what data the function can process.
Instance level access control only permits you to assign permissions to data that are less than or equal to what they are currently assigned. For example, your organization has three user groups defined as Group 1, Group 2, and Group 3. You assign the Administrator role to User A so that User A can manage Group 1 and Group 2. User A cannot assign the management of Group 3 to User B because User A has permission to manage Group 1 and Group 2 only.