Administrator-like privileges

Hi,
I'd like to know if it's possible give the option to a user to manage (create/change roles/delete) users, but without the possibility to add, delete or change the role of an administrator.
I'd like to give to one specific user administrator-like privileges, but I have to make sure that he will not delete the main administrator account. Could you please advise me on how can I enforce that ?