Principals added to scope administration for a given scope must be Owner to access scope data package resource permission. The principal's permission should only require being an Editor, thereby removing the principal from changing the scope administration privileges of others.