I've build an extension for my client and noticed that the features to add, delete, import and export data is only visible when he has got admin privileges. Is there any way I can create a group or role for him so he can still use these features but has no access to the security tab?

Thanks for the link – I think this will work in back-end mode too. I'll try this tomorrow …