Blackberry PRD-10459-035 Administration Guide - Page 11

Administration Guide Creating administrator accounts Creating administrator accounts 1 Administrative roles You can use the predefined roles in the BlackBerry® Enterprise Server, that mirror typical administrative roles that exist in organizations, to control which administrators can perform specific tasks and what information the administrators can view. You assign each BlackBerry Enterprise Server administrator to an administrative role. If you manage your organization's BlackBerry Enterprise Server using Windows® groups, you can assign the groups to the administrative roles so that you can manage role membership within the group. If an administrator starts the BlackBerry Manager, the BlackBerry Manager checks the administrator's authentication credentials, determines which administrative role the administrator is assigned to, and displays a list of the tasks that the administrator can perform. Role security administrator (rim_db_admin_security) enterprise administrator (rim_db_admin_enterprise) device administrator (rim_db_admin_handheld) senior help desk administrator (rim_db_admin_sr_helpdesk) junior help desk administrator (rim_db_admin_jr_helpdesk) Description These administrators can perform all tasks and can view all information. They are the only administrators who can manage role membership. The administrator account that you created during the installation process is assigned the security administrator role automatically. These administrators can perform all tasks for user accounts, BlackBerry Enterprise Server instances, and global application data. These administrators can perform some security tasks. These administrators cannot view role membership. These administrators can perform tasks for managing BlackBerry devices and user accounts. These administrators can perform all device management tasks that relate to user account management. These administrators can perform specific tasks to manage user accounts. However, these administrators cannot add, move, or delete user accounts or send specific IT administration commands. 9