Note Although this article may apply to many implementations in which Microsoft Exchange and BlackBerry devices interact, it is especially applicable in Microsoft Office 365 dedicated.
Because of some limitations in the integration between BlackBerry Administration Service (BAS) and Active Directory, local BAS accounts have to be created to give system administrators and Help Desk personnel access to BAS for administrative tasks.
What do you want to do?
Review the different kinds of BAS accounts for Microsoft Online Services (MSO).
Request an additional BAS account.
Kinds of BAS accounts for Microsoft Online Services
Three roles are available for customers. Each of these roles allows for a slightly different level of administrative access to BAS. The roles are as follows:
Microsoft Online Services (MSO) BlackBerry Enterprise Server (BES) Admins
MSO BES Helpdesk
MSO BES Senior Helpdesk
The MSO BES Admins role provides comprehensive access to functions within the web application. The MSO BES Admins role manages the following:
Client application push functionality. This lets customers create software configurations and assign an application to a user or group.
User management functions for Group and IT Policy assignments
User data log access for PIN, SMS, and telephone call logs through a change request
Adding or deleting BES users
Adding new users to BES policies
Exporting BES user information
The MSO BES Helpdesk role provides a subset of the MOS BES Admins role features for use by frontline support technicians who have to troubleshoot BlackBerry issues. The MSO BES Helpdesk role manages the following:
The MSO BES Senior Helpdesk role has all the same permissions as the MSO BES Helpdesk role. Additionally, this role can add and delete BlackBerry users.
Requests for additional BAS accounts should be submitted to Microsoft Online Services Support. All new accounts will be applied to one of the three available MSO BES roles. The default accounts are called PortalBESAdmin, PortalBESHelpdesk, and PortalBESSeniorHelpdesk. If your company needs additional accounts, the accounts should be created so that they have a number appended to the user name. For example, such accounts could be named PortalBESAdmin2 and PortalBESHelpdesk2.
How to request an additional BAS account
To request an additional BAS account, follow these steps:
Specify the role to which the account should be added. The choices are as follows:
MSO BES Admins (PortalBESAdmin)
MSO BES Helpdesk (PortalBESHelpdesk)
MSO BES Senior Helpdesk (PortalBESSeniorHelpdesk)
Microsoft will contact you by telephone to provide the account user name and password. You should change the password after you log on for the first time. To change the password, in BAS, select Preferences, select My setup, and then select Change my password.
The information and the solution in this document represent the current view of Microsoft Corporation on these issues as of the date of publication. This solution is available through Microsoft or through a third-party provider. Microsoft does not specifically recommend any third-party provider or third-party solution that this article might describe. There might also be other third-party providers or third-party solutions that this article does not describe. Because Microsoft must respond to changing market conditions, this information should not be interpreted to be a commitment by Microsoft. Microsoft cannot guarantee or endorse the accuracy of any information or of any solution that is presented by Microsoft or by any mentioned third-party provider.
Microsoft makes no warranties and excludes all representations, warranties, and conditions whether express, implied, or statutory. These include but are not limited to representations, warranties, or conditions of title, non-infringement, satisfactory condition, merchantability, and fitness for a particular purpose, with regard to any service, solution, product, or any other materials or information. In no event will Microsoft be liable for any third-party solution that this article mentions.