Steps to reproduce:

1. Create some user A with admin role. No access to any host-group is required.
2. As example, let's use default pre-configured map "Local network" with one element - Zabbix server.
3. User A can not see the map under Monitoring->Maps. This is expected behavior.
4. Edit "Local network" map by adding to it a map element of type Image, like cloud.

Result:
User A starts to see the map under Monitoring->Maps and can open it.
Expected:
User's A access to the map should be limited by hostgroup access and not by usage of images in maps.

P.S. Current map access limitations for Admin role users as stated in documentation "Admin level users can see private maps regardless of being the owner or belonging to the shared user list." Does not make a lot of sense. It would make more sense if access would be limited by shared user/group lists. If so, that would also automatically fix my reported issue.