With enough time/management, sure you can create a custom admin role without certain rights.