Can Top Secret administrators be limited to the administration of only certain keyrings or certificates?
There is no way to control what keyrings a TSS administrator can update/create/add.
Once administrative privileges are given, they have full access to all keyrings and certificates.
Please submit an idea on Ideation at support.broadcom.com.