Permission Question in 9.0

Is there a way to create a role that gives all functionality of an Administrator EXCEPT letting the user into the control panel?