You can use a plugin like WP Admin UI to handle restricting access to certain user roles. In the WP Admin UI plugin, you can also assign "client admins" that have Admin rights but you can control exactly what they see.
Change the Login Screen, Remove/Reorder the Admin Menus, Show/Hide Plugin Access, Remove Unwanted MetaBoxes, Remove items from the Top Admin Bar, Restrict/Enable Editor Functions based on role. And, it plays well with other plugins in my experience.
This means if you were using a plugin like White-Label CMS to fully customize your backend to show the businesses own branding and had a client that wanted admin rights, you can set WP to give them rights while also restricting certain elements & hiding the WordPress Update notifications, removing all panels on the welcome dashboard and replacing them with your own, or even add your own logos on the header & footer panels in the back end.
I hope this helps.