What is role based administration in BES

Details

BlackBerry Manager uses pre-defined roles that correspond to common organization administrative roles in order to limit access to sensitive data.  The following table shows the pre-defined roles and their functions:

Role	Functionality
Security Administrator (rim_db_admin_security)	These administrators can perform all tasks. They are the only administrators who can manage role membership or change sensitive security properties, such as licenses and encryption keys.
Audit Security Administrator (rim_db_admin_audit_security)	This role can view the same options as the Security Administrator but cannot change or update any of these options.
Enterprise Administrator (rim_db_admin_enterprise)	These administrators can perform all tasks relating to BlackBerry device users, services, servers and global application data. This role can control the services in the BlackBerry Enterprise Server, but cannot view role membership, licenses, or encryption keys.
Audit Enterprise Administrator (rim_db_admin_audit_enterprise)	This role can view the same options as the Enterprise Administrator but cannot change or update any of these options.
Senior Help Desk Administrator (rim_db_admin_sr_helpdesk)	These administrators can perform all BlackBerry device user management tasks, including deleting BlackBerry device users, changing IT policy assignments, and issuing IT administration commands.
Audit Senior Help Desk Administrator (rim_db_admin_audit_sr_helpdesk)	This role can view the same options as the Senior Help Desk but cannot change or update any of these options.
Device Administrator (rim_db_admin_handheld)	These administrators can perform all tasks that relate to BlackBerry device users and BlackBerry device management. This role is designed for administrators who support new BlackBerry device users and deploy BlackBerry devices.
Audit Device Administrator (rim_db_admin_audit_handheld)	This role can view the same options as the Device Administrator but cannot change or update any of these options.
Junior Help Desk Administrator (rim_db_admin_jr_helpdesk)	These administrators can perform user account management tasks, including creating and sending wireless enterprise activation passwords, and resending service books or IT policies. These administrators cannot add, move, or delete user accounts or send certain IT administration commands. If administrators need view-only access to their role (for example, when training new administrators), the security administrator can assign an audit version of the role to them.
Audit Junior Help Desk Administrator (rim_db_admin__audit_jr_helpdesk)	This role can view the same options as the Junior Help Desk but cannot change or update any of these options.

Note: This information is an overview of the types of administrative roles for the BlackBerry Enterprise Server. For detailed information, see the Role Matrix section of the BlackBerry Enterprise Server: Administration Guide.

Original role matrix is based on RIM Doc ID : KB04889

http://www.blackberry.com/btsc/articles/946/KB04889_f.SAL_Public.html

How to add user in BES administrative roles?

Click on Blackberry Domain > Expand Servers > Servers > Role Administration (on right side pane as seen in above snapshot)

Can we customize the ROLE accordingly? Yes we can, how?
Below are the requirement:
- Any webserver (I will post the Html code in my next post)
- Create a BES DB SQL read only credential.