You can do a parent child business unit. So set the admin to the parent business unit and other users to the child business unit. Then set the assign rights to Parent: Child Business Units .