Creating administrator accounts
1
Administrative roles
You can use the predefined roles in the BlackBerry® Enterprise Server, that mirror typical administrative roles that exist in
organizations, to control which administrators can perform specific tasks and what information the administrators can view.
You assign each BlackBerry Enterprise Server administrator to an administrative role. If you manage your organization's BlackBerry
Enterprise Server using Windows® groups, you can assign the groups to the administrative roles so that you can manage role
membership within the group.
If an administrator starts the BlackBerry Manager, the BlackBerry Manager checks the administrator's authentication credentials,
determines which administrative role the administrator is assigned to, and displays a list of the tasks that the administrator can
perform.
Role
Description
security administrator
(rim_db_admin_security)
These administrators can perform all tasks and can view all information. They are the only
administrators who can manage role membership.
The administrator account that you created during the installation process is assigned the
security administrator role automatically.
enterprise administrator
(rim_db_admin_enterprise)
These administrators can perform all tasks for user accounts, BlackBerry Enterprise Server
instances, and global application data. These administrators can perform some security
tasks.
These administrators cannot view role membership.
device administrator
(rim_db_admin_handheld)
These administrators can perform tasks for managing BlackBerry devices and user
accounts.
senior help desk administrator
(rim_db_admin_sr_helpdesk)
These administrators can perform all device management tasks that relate to user account
management.
junior help desk administrator
(rim_db_admin_jr_helpdesk)
These administrators can perform specific tasks to manage user accounts. However, these
administrators cannot add, move, or delete user accounts or send specific IT administration
commands.
Administration Guide
Creating administrator accounts
9
