PMP Application Administration (Admin Account)

PMP Application Administration (Admin Account)

I have a question regarding security and role access.  I read the installation documentation and it doesn't show or specify where the administrator account is created to manage the application.  Does this local application administrator account have access to view/modify passwords in the vault, or do they only have the ability to configure and manage the application?
 
I would prefer to restrict the local application admin account from viewing/modifying passwords, and only allow the Password Admins the ability to do that.  Not sure if that's possible at all.
 
Thanks in advance for answering my questions!

                  New to ADSelfService Plus?