If anyone out there is running rel 11.0+ and would like for the site admin to have a log in to the web client w/ restricted access you may have found out it doesn't exist. There is an open DCR on this and if enough people complain they may actually do something about it (DCR 218816).
Just thought I would throw that one out there in case someone wants to be added to the list.