Administrators

You can review the preconfigured roles available for administrators in 
BlackBerry UEM
 to determine if you need to create custom roles or change role settings to meet your organization's requirements. You must be a Security administrator to create custom roles, view information about a role, change role settings, delete roles, and rank roles. For more information about administrator roles, see "Creating and managing administrator roles" in the BlackBerry UEM Administration content or in the BlackBerry UEM Cloud Administration content
If you want to create roles specifically for administrators who manage 
BBM Enterprise
 users, consider using the following permissions. 
For administrators who manage 
BBM Enterprise
 activation:
  • Generate an activation password and send email
  • Specify multiple activation passwords with unique activation profiles for a user
  • Specify whether activation passwords expire after first device is activated
  • Specify an activation password
For administrators who deactivate 
BBM Enterprise
 devices:
  • Delete device
  • Delete multiple devices 
For administrators who view and edit 
BBM Enterprise
 users:
  • Edit users
  • Assign IT policies and profiles to users
For administrators who view and edit 
BBM Enterprise
 groups:
  • Delete user groups
  • Create and edit user groups
  • Assign IT policies and profiles to user groups
For administrators who view, edit, and delete 
BBM Enterprise
 profiles:
  • Rank IT policies and profiles
  • Create and edit IT policies
  • Delete IT policies
  • View IT policies
Inside user and group view works in conjunction with the above two items of user and group 
BBM Enterprise
 service management UI.