• Just say NO.

    you wouldn't expect the sys admin to give everyone full access to the AD.