You can configure administrators which don't have access to Apps
Control access to Apps
Apply strict restriction on what an admin can do
Restricted administration rights
Backend debranding
Allows to make Settings menu visible for non-admins
Show settings menu for non-admin
Non-superuser admins cannot change protected ir.rule or uninstall this module
Protect ir.rule records