I think I have a solution. If I give all the read/write access rights to the various required subfolders in the administration area, then add the end user group to the top level administration folder but untick all of the read/write/delete options it seems to allow me to hide the administration fold...