1. The help desk can be disabled under Configuration\General Settings, as taeratrin mentioned as well.
2. At the moment, user roles can only be assigned to individual users, but development will be adding an option to assign roles to Active Directory user groups as well, within the next few weeks.