Redefine User Roles and Rights to limit Team Design access

We have to make all of our local admins have Read Only access because we want to limit which admins can access our Team Design licenses. There should be multiple levels of admin roles that better differentiate access, especially to Team Design which has limited licenses.