In ConsoleOne, administrators in addition to the Admin user should be given rights judiciously, as described in Section 87.0, GroupWise Administrator Rights.
The POA should be configured for client/server access, so that GroupWise users do not require any direct access to any databases in the post office. For more information, see Section 36.2.1, Using Client/Server Access to the Post Office.