According to the device specification for the Control Characteristic, it says that you need to set the control, param and the address based on the table given in 220.127.116.11.1. For the ADMIN privilege, you need to set control to 0x06 and address variable to the device address. But for the USER privilege, the control is set to 0x07 and others aren't required.
So the difference between the two privileges is that you need to set the address variable with the device address for ADMIN Privilege and to obtain the address you need to first obtain the paired device list using control command as 0x00.
Based on the 0x00 control command, the data containing the device address can be read. Once the device address is available, set this to the address variable, set the structure for ADMIN privilege and then you can read/write the data. Hope it makes sense.