Block Access to Internal Company for Full Administrator

Grant a new permission or allow a higher privileged admin to remove the companies from role permissions for lower technicians. Need to allow my tier 2/3 techs full admin to CWC, but not allow them to see screenshot or remotely connect to CEO PC without consent to avoid engineer seeing confidential info.