Kerberos authentication

We are using BOE XI 3.1, want to enable the SSO using kerberos authentication. I got a basic question regarding the authentication.

What type of access Business Objects would have to the data in Active Directory once the kerberos authentication is enabled. Does Business Objects will wind up having read access to all the data in Active Directory?. Please help.

Thanks