Restricted Permissions or Custom Access Role for the Account and SPACE levels

Unfortunately, we were just informed that there is no permissions or access role (even a custom one) that can be specifically to limit what is modified at the account and/or space level.  Example:  Admin for the space has turned off in permissions to not be able to modify custom fields.  However, because they must have the ability to do so at their folder/project level the access role must be turned on which essentially is allowing them to modify for the entire space.  The access role does not distinguish for what an Admin can/cannot do at the SPACE level.  We need additional custom access role fields related to the SPACE.
Currently, we have inexperienced users that are modifying custom fields which result in disruption at the SPACE level for reports, calendars and projects.