To meet our data protection requirements we need admins to have different admin rights for different user groups.
Example:
One admin should have enrollment rights for all users from one country to assign them to courses. However he should only be able to see the reporting (especially the scores in assessments) for the users who directly report to him.