If you need to restrict permissions of admin users you can use User Role settings which enables you to limit employees access. In order to add the new Admin User Role please go to Admin Panel >  System> >  Permissions >  User Roles.

Magento 2 User Role

Roles

After that, you see the list of existing roles which you can edit. Besides, you can add a new role by pressing the Add New Role button.

Magento 2 Roles,Add New Role

 Role Information

1. Set a name of the role in the Role Name field.

2. In the Your Password field, you specify the current password of a user you are logged in under. It was created for your security, thus you can add/edit role right after you confirm your password.

Magento2 New Role,Role Information

After finishing with  Role Info please move to the Role Resources tab.

 

Role Resources

Here you choose the resources you will have access to.

1. Choose 'All' in Resource Access if you want this user group to have access to all pages and capabilities of the admin panel.

2. Choose 'Custom' in this Resource Access field in order to be able to select interfaces to which you want to provide access.

Magento 2 Roles,Role Resourses

Once you have finished don't forget to press the Save Role button.

Magento 2 New Role,Save Role

When the new role is created you can set it to the admin user.