Administrators

You can review the preconfigured roles available for administrators in 

BlackBerry UEM

 to determine if you need to create custom roles or change role settings to meet your organization's requirements. You must be a Security administrator to create custom roles, view information about a role, change role settings, delete roles, and rank roles. For more information about administrator roles, see "Creating and managing administrator roles" in the BlackBerry UEM Administration content or in the BlackBerry UEM Cloud Administration content. 

If you want to create roles specifically for administrators who manage 

BBM Enterprise

 users, consider using the following permissions. 

For administrators who manage 

BBM Enterprise

 activation:

Generate an activation password and send email
Specify multiple activation passwords with unique activation profiles for a user
Specify whether activation passwords expire after first device is activated
Specify an activation password

For administrators who deactivate 

BBM Enterprise

 devices:

Delete device
Delete multiple devices 

For administrators who view and edit 

BBM Enterprise

 users:

Edit users
Assign IT policies and profiles to users

For administrators who view and edit 

BBM Enterprise

 groups:

Delete user groups
Create and edit user groups
Assign IT policies and profiles to user groups

For administrators who view, edit, and delete 

BBM Enterprise

 profiles:

Rank IT policies and profiles
Create and edit IT policies
Delete IT policies
View IT policies