If you do not want the administrator to see personal passwords of an employee, you can also use a right template on a folder. At this all newly created folders and datasets are created exactly with this right template. You only have to delete the administrator in the right template and therefore only give the user the accordant rights for his folder and his datasets.

 

You can deposit this in the folder properties in the tab extended.

 

 

As soon as a right template for the folder is active only these rights from the right template are valid for subordinated new folders and datasets. Even an administrator could not add any datasets here if he/she is not contained in the right template.