Admin Roles

A user with ‘Administrator’ role can anything at WordPress managed site.
If you need to reduce a power of a user which fulfills some administrative tasks, create a copy of administrator role and switch off unneeded capabilities for that role. For example in order to prohibit to such admin editing user profiles – turn OFF the ‘edit_users’ capability.

Note: Do not include any capability started with ‘ure_’ to such role. These capabilities give access to the User Role Editor.