Permissions for preconfigured roles
The following table lists the permissions for each preconfigured role.
Permission name |
Security Administrator |
Enterprise Administrator |
Senior Helpdesk Administrator |
Junior Helpdesk Administrator |
Server Only Administrator |
User Only Administrator |
---|---|---|---|---|---|---|
User and device group |
||||||
Create a group |
√ | √ | √ | √ | ||
Delete a group |
√ | √ | √ | |||
View a group |
√ | √ | √ | √ | √ | |
Edit a group |
√ | √ | √ | √ | √ | |
Create a user |
√ | √ | √ | √ | ||
Delete a user |
√ | √ | √ | √ | ||
View a user |
√ | √ | √ | √ | √ | |
Edit a user |
√ | √ | √ | √ | √ | |
View a device |
√ | √ | √ | √ | √ | |
Edit a device |
√ | √ | √ | √ | √ | |
View device activation settings |
√ | √ | √ | |||
Edit device activation settings |
√ | √ | √ | |||
Create an IT policy |
√ | √ | √ | |||
Delete an IT policy |
√ | √ | √ | |||
View an IT policy |
√ | √ | √ | √ | √ | |
Edit an IT policy |
√ | √ | √ | |||
Import an IT policy |
√ | √ | √ | |||
Export an IT policy |
√ | √ | √ | |||
Resend data to devices |
√ | √ | √ | √ | ||
Create a software configuration |
√ | √ | √ | |||
View a software configuration |
√ | √ | √ | √ | √ | |
Edit a software configuration |
√ | √ | √ | |||
Delete a software configuration |
√ | √ | √ | |||
Create an application |
√ | √ | √ | |||
View an application |
√ | √ | √ | √ | √ | |
Edit an application |
√ | √ | √ | |||
Delete an application |
√ | √ | √ | |||
Create an administrator user |
√ | |||||
Add or remove user configuration |
√ | √ | √ | √ | ||
Import or export users |
√ | √ | √ | |||
Import user updates |
√ | √ | √ | |||
Assign the current device to a user |
√ | √ | √ | √ | √ | |
Delete all device data and remove device |
√ | √ | √ | √ | √ | |
Delete only the organization data and remove device |
√ | √ | √ | √ | √ | |
View associated BlackBerry Device Service |
√ | √ | √ | √ | √ | |
Override associated BlackBerry Device Service |
√ | √ | √ | √ | ||
View a company directory connection |
√ | √ | √ | √ | ||
Edit a company directory connection |
√ | √ | √ | √ | ||
View user authentication |
√ | |||||
Create an email profile |
√ | √ | √ | |||
Edit user authentication |
√ | |||||
Delete an email profile |
√ | √ | √ | |||
View an email profile |
√ | √ | √ | √ | √ | |
Edit an email profile |
√ | √ | √ | |||
Create a SCEP profile |
√ | √ | √ | |||
Delete a SCEP profile |
√ | √ | √ | |||
View a SCEP profile |
√ | √ | √ | √ | √ | |
Edit a SCEP profile |
√ | √ | √ | |||
Create a proxy profile |
√ | √ | √ | |||
Delete a proxy profile |
√ | √ | √ | |||
Create a company directory connection |
√ | √ | √ | |||
View a proxy profile |
√ | √ | √ | √ | √ | √ |
Delete a company directory connection |
√ | √ | √ | |||
Edit a proxy profile |
√ | √ | √ | |||
View enterprise authentication |
√ | √ | √ | |||
Import an enterprise authentication file |
√ | √ | √ | |||
Remove enterprise authentication file |
√ | √ | √ | |||
View device backup encryption keys |
√ | |||||
Edit device backup encryption keys | √ | |||||
View compliance rules |
√ | √ | ||||
Edit compliance rules |
√ | √ | ||||
View certificate retrieval settings |
√ | √ | ||||
Edit certificate retrieval settings |
√ | √ | ||||
BlackBerry Device Service permissions | ||||||
Specify an activation password |
√ | √ | √ | √ | √ | |
Generate an activation email |
√ | √ | √ | √ | √ | |
Enterprise Management Web Service permissions | ||||||
Import new users |
√ | √ | √ | |||
Topology group | ||||||
View a server |
√ | √ | √ | |||
Edit a server |
√ | √ | √ | |||
View a component |
√ | √ | √ | |||
Edit a component |
√ | √ | √ | |||
View an instance |
√ | √ | √ | |||
Edit an instance |
√ | √ | √ | |||
Change the status of an instance |
√ | √ | √ | |||
Edit an instance relationship |
√ | √ | √ | |||
View a job |
√ | √ | √ | |||
Edit a job |
√ | √ | √ | |||
View default distribution settings for a job |
√ | √ | √ | |||
Edit default distribution settings for a job |
√ | √ | √ | |||
Manage deployment job tasks |
√ | √ | √ | √ | ||
Change the status of a job task |
√ | √ | √ | |||
Delete an instance |
√ | √ | √ | |||
Edit license keys |
√ | √ | √ | |||
View license keys |
√ | √ | √ | |||
View reconciliation event status |
√ | √ | √ | √ | √ | √ |
View SMTP configuration |
√ | √ | √ | |||
Edit SMTP configuration |
√ | √ | √ | |||
View BlackBerry Enterprise Service 10 license information |
√ | √ | √ | √ | √ | √ |
Edit BlackBerry Enterprise Service 10 license information |
√ | |||||
View an organization notice |
√ | √ | √ | √ | ||
Edit an organization notice |
√ | √ | ||||
View wireless service plan |
√ | √ | √ | √ | ||
Edit wireless service plan |
√ | √ | ||||
BlackBerry MDS Connection Service permissions |
||||||
View rules for the BlackBerry MDS Connection Service |
√ | √ | √ | √ | ||
BlackBerry Administration Service setup group |
||||||
Create a role |
√ | |||||
Delete a role |
√ | |||||
View a role |
√ | √ | √ | |||
Edit a role |
√ | |||||
Add or remove a role |
√ | |||||
View BlackBerry Administration Service software management |
√ | √ | √ | |||
Edit BlackBerry Administration Service software management |
√ | √ | ||||
Import or export groups within roles |
√ | |||||
View BlackBerry Administration Service certificate management |
√ | |||||
Edit BlackBerry Administration Service certificate management |
√ | |||||
Organizations |
||||||
View an organization |
√ | |||||
Edit an organization |
√ |