is there a way to make a group permission that have all the permission of an administrator, but they can not alter the administrator it self. sort of like having a super administrator where the group below it cannot alter anything group above it (level permission).

the reason i need this is because I'm making a web site for a client, and he needs the permission to move new register member to a group what ever he like, but he cannot change my status.

help please.. :)