Samba share fully accessible by Domain Admins but not Domain Users with AD?

[sotiris.bos]

Hello, I am trying to set up a Samba share where each domain user will have their own folder that is the only folder they have access to but domain admins can have access to all user folders. I am not setting the share as a home share in TrueNAS.

I am using Samba AD running on an Ubuntu server VM.

What is the correct dataset ACL to achieve what I am looking for?