Permissions for preconfigured roles
The following table lists the permissions for each preconfigured role.
|
Permission name |
Security Administrator |
Enterprise Administrator |
Senior Helpdesk Administrator |
Junior Helpdesk Administrator |
Server Only Administrator |
User Only Administrator |
|---|---|---|---|---|---|---|
|
User and device group |
||||||
|
Create a group |
√ | √ | √ | √ | ||
|
Delete a group |
√ | √ | √ | |||
|
View a group |
√ | √ | √ | √ | √ | |
|
Edit a group |
√ | √ | √ | √ | √ | |
|
Create a user |
√ | √ | √ | √ | ||
|
Delete a user |
√ | √ | √ | √ | ||
|
View a user |
√ | √ | √ | √ | √ | |
|
Edit a user |
√ | √ | √ | √ | √ | |
|
View a device |
√ | √ | √ | √ | √ | |
|
Edit a device |
√ | √ | √ | √ | √ | |
|
View device activation settings |
√ | √ | √ | |||
|
Edit device activation settings |
√ | √ | √ | |||
|
Create an IT policy |
√ | √ | √ | |||
|
Delete an IT policy |
√ | √ | √ | |||
|
View an IT policy |
√ | √ | √ | √ | √ | |
|
Edit an IT policy |
√ | √ | √ | |||
|
Import an IT policy |
√ | √ | √ | |||
|
Export an IT policy |
√ | √ | √ | |||
|
Resend data to devices |
√ | √ | √ | √ | ||
|
Create a software configuration |
√ | √ | √ | |||
|
View a software configuration |
√ | √ | √ | √ | √ | |
|
Edit a software configuration |
√ | √ | √ | |||
|
Delete a software configuration |
√ | √ | √ | |||
|
Create an application |
√ | √ | √ | |||
|
View an application |
√ | √ | √ | √ | √ | |
|
Edit an application |
√ | √ | √ | |||
|
Delete an application |
√ | √ | √ | |||
|
Create an administrator user |
√ | |||||
|
Add or remove user configuration |
√ | √ | √ | √ | ||
|
Import or export users |
√ | √ | √ | |||
|
Import user updates |
√ | √ | √ | |||
|
Assign the current device to a user |
√ | √ | √ | √ | √ | |
|
Delete all device data and remove device |
√ | √ | √ | √ | √ | |
|
Delete only the organization data and remove device |
√ | √ | √ | √ | √ | |
|
View associated BlackBerry Device Service |
√ | √ | √ | √ | √ | |
|
Override associated BlackBerry Device Service |
√ | √ | √ | √ | ||
|
View a company directory connection |
√ | √ | √ | √ | ||
|
Edit a company directory connection |
√ | √ | √ | √ | ||
|
View user authentication |
√ | |||||
|
Create an email profile |
√ | √ | √ | |||
|
Edit user authentication |
√ | |||||
|
Delete an email profile |
√ | √ | √ | |||
|
View an email profile |
√ | √ | √ | √ | √ | |
|
Edit an email profile |
√ | √ | √ | |||
|
Create a SCEP profile |
√ | √ | √ | |||
|
Delete a SCEP profile |
√ | √ | √ | |||
|
View a SCEP profile |
√ | √ | √ | √ | √ | |
|
Edit a SCEP profile |
√ | √ | √ | |||
|
Create a proxy profile |
√ | √ | √ | |||
|
Delete a proxy profile |
√ | √ | √ | |||
|
Create a company directory connection |
√ | √ | √ | |||
|
View a proxy profile |
√ | √ | √ | √ | √ | √ |
|
Delete a company directory connection |
√ | √ | √ | |||
|
Edit a proxy profile |
√ | √ | √ | |||
|
View enterprise authentication |
√ | √ | √ | |||
|
Import an enterprise authentication file |
√ | √ | √ | |||
|
Remove enterprise authentication file |
√ | √ | √ | |||
|
View device backup encryption keys |
√ | |||||
| Edit device backup encryption keys | √ | |||||
|
View compliance rules |
√ | √ | ||||
|
Edit compliance rules |
√ | √ | ||||
|
View certificate retrieval settings |
√ | √ | ||||
|
Edit certificate retrieval settings |
√ | √ | ||||
| BlackBerry Device Service permissions | ||||||
|
Specify an activation password |
√ | √ | √ | √ | √ | |
|
Generate an activation email |
√ | √ | √ | √ | √ | |
| Enterprise Management Web Service permissions | ||||||
|
Import new users |
√ | √ | √ | |||
| Topology group | ||||||
|
View a server |
√ | √ | √ | |||
|
Edit a server |
√ | √ | √ | |||
|
View a component |
√ | √ | √ | |||
|
Edit a component |
√ | √ | √ | |||
|
View an instance |
√ | √ | √ | |||
|
Edit an instance |
√ | √ | √ | |||
|
Change the status of an instance |
√ | √ | √ | |||
|
Edit an instance relationship |
√ | √ | √ | |||
|
View a job |
√ | √ | √ | |||
|
Edit a job |
√ | √ | √ | |||
|
View default distribution settings for a job |
√ | √ | √ | |||
|
Edit default distribution settings for a job |
√ | √ | √ | |||
|
Manage deployment job tasks |
√ | √ | √ | √ | ||
|
Change the status of a job task |
√ | √ | √ | |||
|
Delete an instance |
√ | √ | √ | |||
|
Edit license keys |
√ | √ | √ | |||
|
View license keys |
√ | √ | √ | |||
|
View reconciliation event status |
√ | √ | √ | √ | √ | √ |
|
View SMTP configuration |
√ | √ | √ | |||
|
Edit SMTP configuration |
√ | √ | √ | |||
|
View BlackBerry Enterprise Service 10 license information |
√ | √ | √ | √ | √ | √ |
|
Edit BlackBerry Enterprise Service 10 license information |
√ | |||||
|
View an organization notice |
√ | √ | √ | √ | ||
|
Edit an organization notice |
√ | √ | ||||
|
View wireless service plan |
√ | √ | √ | √ | ||
|
Edit wireless service plan |
√ | √ | ||||
|
BlackBerry MDS Connection Service permissions |
||||||
|
View rules for the BlackBerry MDS Connection Service |
√ | √ | √ | √ | ||
|
BlackBerry Administration Service setup group |
||||||
|
Create a role |
√ | |||||
|
Delete a role |
√ | |||||
|
View a role |
√ | √ | √ | |||
|
Edit a role |
√ | |||||
|
Add or remove a role |
√ | |||||
|
View BlackBerry Administration Service software management |
√ | √ | √ | |||
|
Edit BlackBerry Administration Service software management |
√ | √ | ||||
|
Import or export groups within roles |
√ | |||||
|
View BlackBerry Administration Service certificate management |
√ | |||||
|
Edit BlackBerry Administration Service certificate management |
√ | |||||
|
Organizations |
||||||
|
View an organization |
√ | |||||
|
Edit an organization |
√ | |||||

