Steve Puddick

This plugin prevents unauthorized admin users from damaging or compromising your website.
A common technique for hackers is to exploit vulnerabilities in your plugins or theme and try to create an unauthorized admin user for themselves. Once they have admin access they can do whatever they want to your website. They can deface it, display inappropriate content, or carry out many other malicious acts.
Restricted User Activity adds an extra step to the process of allowing Admin users to perform actions on your website. It achieves this by explicitly specifying valid Admin user ids in the wp-config.php file. Even if a hacker was able to create an Admin user for themselves, they won’t be able to perform any actions since their user id would not be in the valid user list.
Note: This plugin requires some technical knowledge about how the WordPress wp-config.php file works and basic PHP coding. A single line of code needs to be added to the wp-config.php file.

Restricted User Activity

Provides stricter controls for admin user creation and activity

Eugene Yudin

By means of a plugin “Setup of roles” you can easily add/delete the user roles, except a role “Administrator”, and quickly set up capabilities of each of them according to the needs.

Setup of roles

"Setup of roles" very simple plug-in for setup of roles and capabilities of users.

Restricted User Activity vs Setup of roles