Well here he go again about the RIM webiste..
Anyways to answer you question: You don't give any permssions to the Helpdesk
The Application creates a ODBC connection to the BESMgmt(Config database) database using the BESAdmin (Service Account) credentials
You are asked to specify the BESAdmin Username/Password during the Blackberry manager install on the remote Desktop.
I hope this answers your questions...