I swear I've done some moderately thorough investigating on this topic, including searching here.
I manage our Exchange environment, including a single BES (v4, ~800 handhelds). Our Blackberry support model is business hours only. After-hours or weekend requests wait until the next business day. Roughly 2-5x a month, a Blackberry user needs an after-hours enterprise activation or device password reset.
"The Man" has decided that the entire HelpDesk needs the ability to manage the BES for these after-hour requests. I've decided to pick my battles and not fight this one. I'm looking for suggestions on how to best handle this permission granting. If I can make the permissions granular enough to only allow enterprise activations, device password resets, adding new users, that would be most excellent, but I'm assuming BES4 isn't going to have any way of doing that.
Any comments or suggestions are appreciated. Thanks in advance.