MBAM Recovery User Group Issue

I've got an odd one. With my BitLocker recovery page the Help Desk staff has to put in the domain and username in order to retrieve recovery keys. Simple enough I just need to make their accounts part of the MBAM Advanced Helpdesk Users group... Except I get the same results when I do. Anyone else run into this before? Thanks!