block admin console access without denying

I do not want users assigned a "viewer" role or "participant" role to be able to have access to the Admin Console.

    *My Apps - Account Admin Manage my account - Admin Console

I would like "admin" role to be able to share app with users but also not be able to access the Admin Console.

I do not want to "Deny" users because I want them to have access to log in to the app and use it, I just do not want everyone seeing the Admin Console information.

Is this possible?