role manager question

i have only 3 roles: admin, boss, and user. the user is an “author”. the admin is me (and only me). the boss is for helpers. i want them to create user accounts, moderate, etc. i DO NOT want them to be able to delete other bosses (or my) account, or be able to change the role of anyone other than a “user”. what to do?? thanks!