The "restricted accounts" mentioned in the article can still make changes to your BackupExec configuration
There used to be a free Add-On called ExecView that would allow you to specify users who could monitor job status, respond to alerts and release previously defined jobs, but make no changes
You can go to the "ideas" section of this site to ask for something similar in an SP or future Version
https://www-secure.symantec.com/connect/blogs/introducing-ideas-symantec-connect