Is it possible to create an admin user with only admin functionality

Hello
I am looking to create a user that only has access to Admin functionality but not the data in the com. The idea is that the user admin/it admin must not have access to financial/sales data. Is this doable?

I think this can be done in the following way.

  1. Admin can create a new Role called “IT Admin” with only Users module enabled.
  2. Create a new user with this role.
  3. The new user with IT Admin can then create new users as per requirement.