It seems this should be possible but when I set: System -> CP Users -> Edit -> Type = admin ...they can see all clients. Is there another way?
Thats exactly what a reseller is. So no changes are nescessary, just create a reseller and do not touech the settings under sysstem > CP users.