Prevent a user from creating Admin users

I’ve created a custom role: a user who can manage other users.

I’d like this user to be able to add users and edit their privileges – in a limited sense.

I’d like to prevent this new role from being able to create Administrators and Editors.

Is it possible to do this with Members?