For now it is only possible to make a user admin within the Workspace365 portal and having all privileges coming with that.
It would however be great if you can give a user privileges on each separate component and not granting them for all.

For example, one of our engineers could easily add an application in the app store, but we don't want him to see and be able to adjust the subscription settings. Or someone who may adjust the branding part of the customers tenant, but further may not modify anything else.