I think be good be possible put a Role that a admin of helpdesk Created as Role default to all new agents to avoid problems of access unauthorized access