Block non admin users from adding domains to blacklist?

I’m currently looking for the option to block non admin users from adding domains to the blacklist.

Can you tell me where to find it?

The block is automatic, and the new behavior is as follows:
User: can white/black list an email address or a domain, but only for messages with the user itself as recipient (email-address to User, domain to User). So, all the other users are not affected.
Admin: can white/black list an email address or a domain for all the users in the system (email-address to All, domain to All).
The only warning is that all non-privileged users should be created as User, not Admin.