Welcome to the Community, @Kristi33.
I've got you covered, I'll share some insights to clarify your queries about the company admin roles access in QuickBooks Online.
Both Primary admin and Company admin can access every part of the QuickBooks account. They can manage all users and other admin tasks; however, the company admin can do everything the primary admin can do, except edit or remove the primary admin's access.
Furthermore, indeed a user with the company admin role can access employee sensitive information like date of birth and SSN. And yes, you can unmask the employee sensitive information as the primary admin using authentication as well and the company admin with the same process through authentication.
You can also check this article that will help you manage users' role in QuickBooks Online:
I'm only a comment away if you have any questions throughout the process of managing the user's access in QuickBooks Online, Kristi33. Take care and enjoy your weekend!
