How to create a BlackBerry Administration Service account for Microsoft Online Services

Note Although this article may apply to many implementations in which Microsoft Exchange and BlackBerry devices interact, it is especially applicable in Microsoft Office 365 dedicated.

Because of some limitations in the integration between BlackBerry Administration Service (BAS) and Active Directory, local BAS accounts have to be created to give system administrators and Helpdesk personnel access to BAS for administrative tasks.

What do you want to do?

  • Review the different kinds of BAS accounts for Microsoft Online Services (MSO).
  • Request an additional BAS account.

Kinds of BAS accounts for Microsoft Online Services

Three roles are available for customers. Each of these roles allows for a slightly different level of administrative access to BAS. The roles are as follows:

  • Microsoft Online Services (MSO) BlackBerry Enterprise Server (BES) Admins
  • MSO BES Helpdesk
  • MSO BES Senior Helpdesk
The MSO BES Admins role provides comprehensive access to functions within the web application. The MSO BES Admins role manages the following:

  • IT Policy
  • Client application push functionality (to let customers create software configurations and assign an application to a user or group)
  • User management functions for Group and IT Policy assignments
  • User data log access for PIN, SMS, and telephone call logs through a change request
  • Adding or deleting BES users
  • Adding new users to BES policies
  • Exporting BES user information
The MSO BES Helpdesk role provides a subset of the MOS BES Admins role features for use by frontline support technicians who have to troubleshoot BlackBerry issues. The MSO BES Helpdesk role manages the following:

  • Setting activation
  • Handheld passwords
The MSO BES Senior Helpdesk role has all the same permissions as the MSO BES Helpdesk role. Additionally, this role can add and delete BlackBerry users.

Requests for additional BAS accounts should be submitted to Microsoft Online Services Support. All new accounts will be applied to one of the three available MSO BES roles. The default accounts are as follows:

  • PortalBESAdmin
  • PortalBESHelpdesk
  • PortalBESSeniorHelpdesk
If your company needs additional accounts, the accounts should be created so that they have a number appended to the user name. For example, such accounts could be named "PortalBESAdmin2" or "PortalBESHelpdesk2."

How to request an additional BAS account

To request an additional BAS account, follow these steps:

  1. Use the Exchange Online topic and the BlackBerry Administration sub-topic when you submit a support incident online to Microsoft Online Services Support, or contact Microsoft Online Services Support by telephone .
  2. Specify the role to which the account should be added. The choices are as follows:

    • MSO BES Admins (PortalBESAdmin)
    • MSO BES Helpdesk (PortalBESHelpdesk)
    • MSO BES Senior Helpdesk (PortalBESSeniorHelpdesk)
  3. Microsoft will contact you by telephone to provide the account user name and password. You should change the password after you log on for the first time. To change the password in BAS, select Preferences, select My setup, and then select Change my password.

    Note Microsoft can also remove these accounts if the customer requests it. 

More Information

The information and the solution in this document represent the current view of Microsoft Corporation on these issues as of the date of publication. This solution is available through Microsoft or through a third-party provider. Microsoft does not specifically recommend any third-party provider or third-party solution that this article might describe. There might also be other third-party providers or third-party solutions that this article does not describe. Because Microsoft must respond to changing market conditions, this information should not be interpreted to be a commitment by Microsoft. Microsoft cannot guarantee or endorse the accuracy of any information or of any solution that is presented by Microsoft or by any mentioned third-party provider.

Microsoft makes no warranties and excludes all representations, warranties, and conditions whether express, implied, or statutory. These include but are not limited to representations, warranties, or conditions of title, non-infringement, satisfactory condition, merchantability, and fitness for a particular purpose, with regard to any service, solution, product, or any other materials or information. In no event will Microsoft be liable for any third-party solution that this article mentions.

Article ID: 2572735 - Last Review: Dec 24, 2015 - Revision: 1