Maybe I just don't understand this structure yet but if I give my helpdesk manager SDadmin rights so he can create the helpdesk ticketing system I have no way of restricting him from things that are not Helpdesk .

This is a big problem because I could never use the features of Professional to Enterprise which have nothing to do with the Helpdesk Mananger; like Purchase Management, Contracts, Change Management.

Can ANYONE help me understand this. I am really lost and thinking this solution is lacking greatly in rights management; again I am will and hoping I just don't understand the basic concept.

I need "Purchase Management, Contracts, Change Management" and my Helpdesk manager can not see any of this stuff because it is confidential.  He does need to be able to build, modify and support the "ticketing" system.

HELP!