We have a production BES and a BESTEST (our test BES) which I use to test IT policy etc before having it go to production. We have been wanting to give our Help Desk guys the ablitity to do some basic things like Add, Remove, Set Activation password on the BES. I am running into some issue:
1. Which of the Role Administrator does the user need to belong to in order to have the ability to create user, delete user, and set activation password?
2. When I am doing admin work on the production BES I am usually logged in locally as the BESadmin account.
As a test, I added my AD account to the Role Administrator with jr. admin bes audit. Then I installed Blackberry Manager, confirm the SQL Database and point it to the BESTEST (non production) machine. Open up Blackberry Manager to see what type of limit I have and I was still able to Add user, Stop MDS services, Start MDS service and apply pull rule.
Am I missing something here? Anything I should check for? Thanks for reading this.