It seems that as soon as I make someone an administrator in the ZCM console, they get access to all the detailed hardware and software inventory of all devices. Is this true and if so, is there a way to deny it?

What I want to be able to do is allow someone to manage bundles but not have access to the detailed hardware and software inventory of all the devices. Is this doable? I tried various combinations of deny rights but can't seem to get it to work.

thanks for any help
Arend