To control the type of objects that administrative users can manage, assign one or more security roles to the administrative ...

To control the type of objects that administrative users can manage, assign one or more security roles  to the  administrative user, and then assign security scopes to limit the instances of objects that the administrative user can manage.