Prevent Role Access to Administrative Users

We are creating a role for our Help Desk so that they can assign roles to users.  They are restricted from doing other things such as creating or modifying classes and roles.  

Is there a way to prevent them from being able to assign certain roles?  For example, the SuperAdminRole is restricted to only a few administrators.  We do not want the Help Desk to be able to assign this role to anyone, or give themselves access to that role.