Full hub access with bookmarks exception?

[ashoklela]

Is there a (simple) way to grant full access to the hub (all actions, all resources) for my RootAdmin role, except to see (edit, etc.) other users' bookmarks?