if you're speaking of Splunk configurations, you can only define different roles (assigned to the users): some roles have enabled administrative functions that are disabled for the other soles, then the data access (without configuration changing) are enabled for all users, or eventualy segmented for different user roles (e.g. developers can access some indexes that are closed for help desk people).
In other words, it isn't possible to have two different interfaces for the two roles.
If you want also a physical separation, you could use two different Search Heads: one for normal users and both for administration but it isn't a good idea because you have a Search Head less used.
It's different if you're speaking of network access rules to the Splunk web interface, that you can segregate by firewall rules (having two Search Heads).