Blackberry PRD-10459-016 User Guide - Page 285

Administration Guide Managing groups and user accounts Managing groups and user 25 accounts Managing groups You can reduce the time that you spend managing user accounts by creating groups of similar user accounts and assigning shared properties, such as software configurations or IT policies, to the group. Properties that you assign to a group are assigned to all user accounts in the group. You can assign properties to user accounts and administrator accounts at the individual level, group level, or domain level. The BlackBerry Administration Service applies properties to user accounts and administrator accounts using the following hierarchy: • The properties at the individual level override the properties at the group level. • The properties at the group level override the properties at the domain level. After you add a user account or administrator account to a group, you can override the properties that you configured for the account at the group level or domain level by changing the properties at the user account level. If you remove a user account or administrator account from a group, the account name remains in the global users list but it does not appear in the group list. You can either create user-specific groups and assign roles to those groups or use the default user groups that contain preexisting roles. If you are managing a large number of groups (over 3000) using the BlackBerry Administration Service in a single domain, your organization's environment might experience a performance impact. Using default groups to manage user accounts and administrator accounts The BlackBerry Enterprise Server installation includes default groups that have preconfigured administrative roles. You can use the default groups in your organization's environment instead of creating specific administrative groups. Each default 285