Read docs etc, just want to confirm.

Slave site 1 has my users
Slave site 2 shares those users (specifically will be using Community builder)
The admin for Slave 2 is only a registered user on Slave 1
Admin on Slave 2 will NOT be SuperUser, will have restrictions as appropriate
Admin for Slave 2 can change groups user is assigned to for Slave 2 only

Here is what I DON'T want the admin for Slave 2 to be able to do:

Read/Change any part of the user's profile (there will be non-public info there)
Add or Delete users
See groups user assigned to Slave 1 or any other Slave's sharing Users with Slave 1

Q: Can I make it work this way?

Thanks,

If you have created a specific "admin" user in the slave 2 under Jommla 2.5 and use the restriction to only read the information then YES as longs as there is not bug in joomla itself, the admin will not be able to perform the other actions.

So check with the Joomla 2.5 ACL that you can have such granularity to restrict the admin actions on the users.

When using the "Partial User Sharing" extension, when a user is not declared to have access to a website, it even does NOT exists in the slave site.
Therefore, no action is possible on something that does not exists at all. MySQL does not see the record.

Remark, it will NOT be possible to add a record with the same key as the one already present because it physically exists but is not saw. So you will have an error when you attemps to add an user that is declared as not available in a specific website.