Is there a way of assigning certain rights to users to allow them to
create zenwork apps, user, add membership rights to users, change
passwords etc... and then also this stops technicians from being able to
touch this type of stuff and only allows seniors to make these changes.

The main reason I ask is because console one is freely available for
download it is easy for a technician of even staff to load it up and
start playing. If this is possible then where do I look? I have setup
iManager to manage some of the jobs I have mentioned but if I logon as a
technician then they have the rights to create zenwork applications
within console one and I would want to stop this.

Thank you for any help you can give me.