Does anyone know how to set up accounts on the domain to allow other people to be able to add/remove users and such to the Bes Server WITHOUT giving them the bbadmin account.

I don't really want lvl one technicians to be able to read everyones email.

You want to use Role Based administration.
Setting up Role Based administration is explained in the Administrator's guide for BES.

Make sure you are running BES 4.1 in order to use role base administration.