Both are only available to Site Admin or Advanced Site admin categories by default.  You can make the change to the System Administration permission category for a sub admin group and add Super Admin level or higher to give access.