Restrict access to updating the system at a Manager level

[JamieLewisIBT]

Can you please restrict anyone other that system owner and system administrator with the ability to update any of the software?