You may have more flexibility using Limited Access Roles: https://www.youtube.com/watch?v=HIJrktiaQ_o The uses tags so that Admin A, with Tag Apps can only manage apps and devices with the tag Apps Once you get your head around it, it's quite powerful
... View more