Is there any way to restrict admin permissions in a granular way? For instance, one group of users should be able to add users and create new projects but cannot install / update plugins. I have tried separating 'System Administrators' and 'Administrators' but the Administrator role still has too much power.