How to hide the tenancy subscription details for cloud administrators

Summary:

We need to create a user to manage the OCI tenancy with creating network and paas components, instead of giving him administrator access on the tenancy, do we have any other options? If we provide administrator access, any option available to hide this user from being access to tenancy subscription and organization management?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):