Single sign on for admin, separate sign on for others

Shared Sign-on with Domain Access. Several sites on one db. One admin to sign on to all sites is working. How do I make other users sign on to just one or some sites?

I can limit the access for other people but authenticated user is on for everyone in every site. What is needed is a domain-role-user link that lets the Drupal administrator, user 1, log in everywhere and limit other people to access only if they have a role at a site. When a user registers at a site, they should get authenticated user for that site. Is there any combination of modules that works with Shared Sign-on to stop all users having a shared sign on?