What is your standard practice in terms of who gets Manager Access to your NAB.  Some companies give all the admins full manager access and set LocalDomainServers with manager also, Others user groups and others restrict the NAB ACL down as low as possible.

What do you do with the ACl of your NAB? Is there any standard or recommended practice?  All comments welcome.