You can assign one or more BlackBerry Workspaces capabilities to preconfigured or custom administrative roles in BlackBerry UEM. The actions that administrators assigned to each role can perform are defined by the BlackBerry Workspaces capability that is assigned to the role. Each BlackBerry Workspaces capability has a set of permissions that specifies the information that UEM administrators can view and the actions that they can perform when they manage BlackBerry Workspaces in the UEM management console.

You must be a Security Administrator to view, change, or assign roles in UEM. By default, the Security Administrator role is assigned all the BlackBerry Workspaces capabilities when you install the BlackBerry Workspaces plug-in for UEM. After the installation, you can assign the appropriate BlackBerry Workspaces capabilities to preconfigured or custom roles.

For example, the Senior HelpDesk role can add and delete UEM user accounts. If a user account is enabled for the BlackBerry Workspaces service, administrators who are assigned the Senior HelpDesk role must have the BlackBerry Workspaces Helpdesk administrator capability so that they can remove the BlackBerry Workspaces service before they can delete the user account.