the service account would be a domain account and already be granted permissions to log on to the box ... but once you make it a DC depending on the policies in place that may be taken away and you'll have problems.
Read:
KB17054 - Assigning permissions for the BlackBerry Enterprise Server service account ... and make these changes before you do a dcpromo.
Better yet, don't make this box a Domain Controller.