IT Edition September 2009
Manageability in BlackBerry Enterprise Server v5.0

The manageability improvements in BlackBerry® Enterprise Server v5.0 are meant to provide far more granular control of an organization’s BlackBerry® deployment and improve efficiencies and reduce the workload of your IT department. In this article, we will briefly describe each of the major manageability improvements in BlackBerry Enterprise Server v5.0 and explain how they’ll change the way your BlackBerry solution is organized and maintained.
BlackBerry Administration Service
With BlackBerry Enterprise Server v5.0, the way you will administrate your BlackBerry® Enterprise Solution has been fundamentally changed, thanks to the BlackBerry Administration Service—a centralized, web-based administrative console. Because there is no longer a need to install administration client software, administrators are now able to control the BlackBerry Enterprise Server from nearly any web-capable computer from any location.
The BlackBerry Administration Service console contains all the tools you need to control your BlackBerry Enterprise Solution. It is used to manage the user accounts on your network and allows you to assign user groups, administrator roles, software configurations, and IT policies to user accounts, and to wirelessly activate BlackBerry smartphones. The console also allows you to manage server hardware and component instances in a BlackBerry Domain and is able to set up and manage the High Availability architecture.
The BlackBerry Administration Service control panel is generated dynamically based on the permissions of the accessing user, meaning that anyone who connects to the service will see only the options appropriate for them.
User Accounts
A host of new features, including custom roles and tiered user groups, make user accounts in BlackBerry Enterprise Server v5.0 more powerful than ever before.
Custom Roles
Since BlackBerry Enterprise Server v4.1, you’ve been able to use roles to create different classes of administrator positions, and in BlackBerry Enterprise Server v5.0 that capability has been augmented with the introduction of custom roles, allowing you to define the exact administrative positions that are right for your organization.
A custom role is defined by a set of fine-grained capabilities that determine which tasks that role can perform within the server. For tasks that affect other user accounts, roles can further specify which groups of accounts can be operated on. For instance, you could create a Junior Admin role and grant that role the ability to manage users and software configurations but not administer users in the “Executive” group or access servers and components.
The administration client configured for a custom junior administrator position.
Roles can be assigned to individuals or to whole user groups, which have also been made more powerful and flexible in BlackBerry Enterprise Server v5.0.
User Groups
User groups provide an organizational structure for users in a BlackBerry Enterprise Solution architecture. Groups determine the IT policies, software configurations and administrative roles that apply to their members. By assigning these characteristics to groups, rather than individuals, you create an architecture that’s more organized, accessible and extensible.
In BlackBerry Enterprise Server v5.0, user groups are hierarchical—that is to say, user groups can belong to other groups, which can themselves belong to other groups, and so on. Users (and groups) inherit all the roles, IT policies and software configurations of their parent groups. Because a user can be a member of multiple groups, there are times when inherited characteristics contradict each other. In these situations, a user is always assigned the least restrictive set of roles and policies from among his parent groups.
Groups and subgroups in practice.
For example, you might have a group called “Product Management” that has three direct subgroups—“Software Product Management,” “Hardware Product Management” and also “Service Product Management” with its own “Executive” subgroup. Thus, the broadest groups are at the top, and subgroups represent more specific subsections of employees.
A user can inherit applications and settings from more than one group.
Continuing the example, if a user is a member of the Executive subgroup and also a member of a different group called “Sales,” he would inherit the most lenient IT policies from those groups and all of the software. This means that such a user would likely have the IT policies of the Executive group, with access to the applications of both groups.
The BlackBerry Administration API
The BlackBerry Administration Application Programming Interface (API) is an important tool in BlackBerry Enterprise Server v5.0, which allows you to write applications to automate tasks that are time-consuming, complicated, or repetitive. For example, with the API you can create applications that can activate a BlackBerry smartphone wirelessly, reset a phone’s password, or install applications.
User Self-Service
With BlackBerry Enterprise Server v5.0, it’s possible to put some control back in the hands of individual users, allowing them to perform software upgrades, device activations, and password changes. By allowing users to perform these simple functions themselves, you free up time for your IT team to concentrate on more demanding tasks.
In this article, we’ve covered many of the new features designed to make it easier than ever to manage the BlackBerry Enterprise Server v5.0. We’ve discussed the new web-based BlackBerry Administration Service console, custom administration roles, and hierarchical user groups. We’ve also mentioned the new BlackBerry Administration API, which lets you automate common tasks, and new options for user self-service.
The common thread to all of these features is the idea that with BlackBerry Enterprise Server v5.0, you shouldn’t have to spend as much time administering your network. With the tools to organize users and administrators into groups and roles that reflect the unique structure of your organization, and a more flexible and robust control interface, your BlackBerry deployment can be better organized and more efficient than ever.
Upgrade to BlackBerry Enterprise Server v5.0 or Download a free trial »
Read the complete BlackBerry Enterprise Server v5.0 series
* Offers subject to change without notice. Please check offer details for more information. Void where prohibited. Check with service provider for availability, roaming arrangements and service plans. Certain features outlined in this document require a minimum version of BlackBerry® Enterprise Server software, BlackBerry® Desktop Software, BlackBerry® Device Software and/or BlackBerry devices and may require additional development or third party products and/or services for access to corporate applications. Prior to subscribing to or implementing any third party products and services, it is your responsibility to ensure that the airtime service provider you are working with has agreed to support all of the features of the third party products and services. Installation and use of third party products and services with Research In Motion's ("RIM") products and services may require one or more patent, trademark or copyright licenses in order to avoid infringement of the intellectual property rights of others. You are solely responsible for determining whether such third party licenses are required and are responsible for acquiring any such licenses. To the extent that such intellectual property licenses may be required, RIM expressly recommends that you do not install or use these products and services until all such applicable licenses have been acquired by you or on your behalf. Your use of third party software shall be governed by and subject to you agreeing to the terms of separate software licenses, if any, for those products or services. Any third party products or services that are provided with RIM products and services are provided "as is." RIM makes no representation, warranty or guarantee whatsoever in relation to the third party products or services and RIM assumes no liability whatsoever in relation to the third party products and services, even if RIM has been advised of the possibility of such damages or can anticipate such damages.
The above information regarding third party products and services is provided in BlackBerry Connection for your information. Since third parties provide the information to Research In Motion Limited ("RIM") and RIM relies on the information without performing any independent investigations, RIM makes no warranty or guarantee concerning the features, reliability, or pricing of the third party products or services, or their compatibility with any RIM products.
© 2009 Research In Motion Limited. All Rights Reserved. BlackBerry®, RIM®, Research In Motion® , SureType®, SurePress™ and related trademarks, names and logos are the property of Research In Motion Limited and are registered and/or used in the U.S. and countries around the world.
