By default, the administrative user will have the Manage Entry Access privilege, which allows them to see all entries. But beyond the initial configuration, there isn't anything special about the admin user - this privilege can be removed from them, and at that point, entries can be hidden from them.