How to delegate the backup and restore to local IT

The user can get into Administration console with the account under which Backup Exec services are running. For example, if there is a user X, whom you want should be able to access the Administration console, you can change the services logon credentials in windows services applet to use user X's credentials. User X will then be able to access the Administration console.

However, local Administrative and Domain Administrative righst are recommended because, unless you have local admin rights on machine, you will not be able to backup or restore on local system and domain admin rights are needed to backup remote systems in a domain and run Backup Exec operations on Remote systems.

The account designated for Backup Exec services - whether it is a new account or an existing user account - will be assigned the following rights, which helps in managing Backup Exec
- Authenticate as any user and gain access to resources under any user identity.
- Create a token object, which can then be used to access any local resources.
- Log on as a service.
- Administrative rights (provides complete and unrestricted rights to the computer).
- Backup operator rights (provides rights to restore files and directories).
- Manage auditing and security log.
 

So Domain Admin / Admin privledges are a must

There is no role based management present in Backup Exec.