Clone the Manager role. Edit the role and remove 'allow' from all the things you don't want. Test it.
Note that with this sort of thing you will be creating a mix of capabilities that - most likely - nobody has ever seen before so don't be surprised if weird things happen.
Note that with this sort of thing you will be creating a mix of capabilities that - most likely - nobody has ever seen before so don't be surprised if weird things happen.