Project application administrator role gives access to all the setup tasks

Summary:

Project application administrator role

Content (required):

Hi

Our customer has an requirement to have access to setup and maintenance tasks ( Only PPM related setup tasks) along with access for "manage department" task to create departments and classify them as project organizations

To meet the above requirement, we just copied the "project application administrator role" ,added "manage department" privilege to it. Now the users have access to the setup tasks, however they have the below problem

1. Manage department page only allows them to create department, but not allowing them to query and view any departments
2. The above custom role (even the standard project application administrator role) gives access to other modules setups like "chart of accounts value sets, ledgers and so on which they don't wanna have access to.