How can i restrict some feature for admin, say admin may not be able to see user space, admin can only manage user (add,modify,change password,remove,etc) ?
The admin user is special in that they skip standard permission checks - they always have all permissions. I think you need a modified "Coordinator" role - or a new role based on this. Coordinator can do most that admin can do - so create a new role based on Coordinator and start removing permissions from that.