Something I forgot, extend the permission matrix to everything in control panel.

We promoted users to admin just because they have to do specific tasks (for instance, somebody who handles new users). But I wouldn't want them to touch most of the settings.

[Linked Image from siemons.org]