Blackberry PRD-10459-003 - Enterprise Server For IBM Lotus Domino, Руководство администратора, Страница: 29 / 420

Creating administrator accounts
3
Administrative roles and permissions
You create roles for administrator accounts or assign preconfigured roles to administrator accounts so that you can
specify what tasks an administrator can perform on the BlackBerry® Enterprise Server.
You can specify the actions that administrators can perform by changing the permission that you assign to
administrative roles. Permissions specify the information that administrators can view and the tasks that they can
perform using the BlackBerry® Administration Service and BlackBerry Monitoring Service. Each action that you
perform in the BlackBerry Administration Service is associated with a specific permission. You can specify the actions
that administrators can perform by changing the permission that you assign to administrative roles. For more
information about performing specific tasks that are associated with the permissions, see the BlackBerry Enterprise
Server Administration Guide. Roles do not apply to tasks that an administrator can perform using the BlackBerry
Configuration Panel.
You can assign multiple roles to administrator accounts. If you assign multiple roles to an administrator account, the
administrator is assigned all the permissions that are turned on for each of the roles.
You can also assign roles to groups and add administrator accounts to groups. This allows you to specify administrative
role permissions at a group level instead of at an individual level. If the group contains BlackBerry device users, the
roles are also assigned to the users and the users become administrators.
Preconfigured administrative roles
The BlackBerry® Enterprise Server installation process includes preconfigured administrative roles. You can use the
preconfigured administrative roles in your organization's environment instead of creating customize administrative
roles. Each preconfigured administrative role contains multiple permissions that are turned on. The preconfigured
administrative roles make sure that users that do not have specific administrative permissions cannot escalate their
permissions. For example, junior helpdesk administrators cannot escalate their roles to senior helpdesk administrator
roles. You can configure additional permissions in the preconfigured administrative roles or turn off any of the
permissions.
Permission name Security role
Enterprise
role
Senior
Helpdesk
role Junior
Helpdesk
role
Server only
role User only
role
Create a group X X X X
Delete a group X X X
View a group (across
Group) X X X X X
Edit a group (across
Group) X X X X X
Create a user X X X X
Administration Guide Creating administrator accounts
27