I'm pretty sure you can deny admin privileges and grant a specific admin access.