Restricting Access to certain functions of control panel

[GGWS Chris]

Hi!

I'm wondering if it's possible to disable certain functions for certain domains/users for anyone not logged in as the master administrator (the 'admin' account)--

more specifically, I'd like to remove the 'certificates' button and maybe one or two others so that the only people who can see it (typically) is the user 'admin'.

Is this possible, or am I dreaming an impossible dream?