"limited" super user

i want to set a new role similar to the super user. i want to make a current user into a super user, however, i want to restrict their access so that they can not get into security and the user table. basically they have full rights but can not amend/create users or their rights. is this possible to achieve without the need of going and selecting each table etc etc and changing the permissions (except the user table and the applicable system settings?)

You must create a new role just like the SUPER role, except for the system objects. For these objects, you have to explicitly specify which ones the semi-SUPER users have access to (for example: Edit, Find or Tools, Zoom). Make sure you do not assign permissions to Security or the Object Designer.

you are looking for “Allow all, except…”, but there is only “Allow…”