There is a with_role
method of inherited_resources
that is used by active admin to assign a scope to certain attributes such that they are only accessible to active admin but not to general users.
Check out the Scoped Mass Assignment with Active Admin.