PMP Application Administration (Admin Account)

PMP Application Administration (Admin Account)

I have a question regarding security and role access.  I read the installation documentation and it doesn't show or specify where the administrator account is created to manage the application.  Does this local application administrator account have access to view/modify passwords in the vault, or do they only have the ability to configure and manage the application?
 
I would prefer to restrict the local application admin account from viewing/modifying passwords, and only allow the Password Admins the ability to do that.  Not sure if that's possible at all.
 
Thanks in advance for answering my questions!