It's been a while since I used it , and that was with v2.5, but the user's file system rights to the BackupExec directory governed what users could do.
NoOne can alter job definitions or create new jobs, but you can release jobs, respond to alerts, or just monitor job status