Permissions for preconfigured roles

The following table lists the permissions for each preconfigured role.

Permission name

Security Administrator

Enterprise Administrator

Senior Helpdesk Administrator

Junior Helpdesk Administrator

Server Only Administrator

User Only Administrator

User and device group

Create a group

√ √ √     √

Delete a group

√ √       √

View a group

√ √ √ √   √

Edit a group

√ √ √ √   √

Create a user

√ √ √     √

Delete a user

√ √ √     √

View a user

√ √ √ √   √

Edit a user

√ √ √ √   √

View a device

√ √ √ √   √

Edit a device

√ √ √ √   √

View device activation settings

√ √       √

Edit device activation settings

√ √       √

Create an IT policy

√ √       √

Delete an IT policy

√ √       √

View an IT policy

√ √ √ √   √

Edit an IT policy

√ √       √

Import an IT policy

√ √       √

Export an IT policy

√ √       √

Resend data to devices

√ √ √     √

Create a software configuration

√ √       √

View a software configuration

√ √ √ √   √

Edit a software configuration

√ √       √

Delete a software configuration

√ √       √

Create an application

√ √       √

View an application

√ √ √ √   √

Edit an application

√ √       √

Delete an application

√ √       √

Create an administrator user

√      

Add or remove user configuration

√ √ √     √

Import or export users

√ √       √

Import user updates

√ √       √

Assign the current device to a user

√ √ √ √   √

Delete all device data and remove device

√ √ √ √   √

Delete only the organization data and remove device

√ √ √ √   √

View associated BlackBerry Device Service

√ √ √ √   √

Override associated BlackBerry Device Service

√ √ √     √

View a company directory connection

√ √     √ √

Edit a company directory connection

√ √     √ √

View user authentication

√          

Create an email profile

√ √       √

Edit user authentication

√          

Delete an email profile

√ √       √

View an email profile

√ √ √ √   √

Edit an email profile

√ √     √

Create a SCEP profile

√ √       √

Delete a SCEP profile

√ √       √

View a SCEP profile

√ √ √ √   √

Edit a SCEP profile

√ √       √

Create a proxy profile

√ √       √

Delete a proxy profile

√ √       √

Create a company directory connection

√ √       √

View a proxy profile

√ √ √ √ √ √

Delete a company directory connection

√ √       √

Edit a proxy profile

√ √       √

View enterprise authentication

√ √       √

Import an enterprise authentication file

√ √       √

Remove enterprise authentication file

√ √       √

View device backup encryption keys

√          
Edit device backup encryption keys √          

View compliance rules

√ √        

Edit compliance rules

√ √        

View certificate retrieval settings

√ √        

Edit certificate retrieval settings

√ √        
BlackBerry Device Service permissions

Specify an activation password

√ √ √ √   √

Generate an activation email

√ √ √ √   √
Enterprise Management Web Service permissions

Import new users

√ √       √
Topology group

View a server

√ √     √  

Edit a server

√ √     √  

View a component

√ √     √  

Edit a component

√ √     √  

View an instance

√ √     √  

Edit an instance

√ √     √  

Change the status of an instance

√ √     √  

Edit an instance relationship

√ √     √  

View a job

√ √       √

Edit a job

√ √       √

View default distribution settings for a job

√ √       √

Edit default distribution settings for a job

√ √       √

Manage deployment job tasks

√ √ √     √

Change the status of a job task

√ √       √

Delete an instance

√ √     √  

Edit license keys

√ √     √  

View license keys

√ √     √  

View reconciliation event status

√ √ √ √ √ √

View SMTP configuration

√ √     √  

Edit SMTP configuration

√ √     √  

View BlackBerry Enterprise Service 10 license information

√ √ √ √ √ √

Edit BlackBerry Enterprise Service 10 license information

√          

View an organization notice

√ √ √ √    

Edit an organization notice

√ √        

View wireless service plan

√ √ √     √

Edit wireless service plan

√ √        

BlackBerry MDS Connection Service permissions

View rules for the BlackBerry MDS Connection Service

√ √ √ √    

BlackBerry Administration Service setup group

Create a role

√          

Delete a role

√          

View a role

√ √       √

Edit a role

√          

Add or remove a role

√          

View BlackBerry Administration Service software management

√ √     √  

Edit BlackBerry Administration Service software management

√ √        

Import or export groups within roles

√          

View BlackBerry Administration Service certificate management

√          

Edit BlackBerry Administration Service certificate management

√          

Organizations

View an organization

√          

Edit an organization

√