Last step assigning roles and rights to users.

1) Remove specific Administrator rights

All specific administrator rights are enabled by default. You can disable them using the switches.

An administrator can't change their own rights. If you would like to assign an administrator less rights, you can choose to also turn off Log in as other administrators.
Otherwise they can still log into the account of another administrator to assign themselves more right.