We do use Superuser sturcture where the person has more capabilities than a normal "plan license user" but less capabilities than a System Admin. The main difference we have is
limited ability to "Setup" area for superuser,
Superusers cannot delete projects, create teams, create milestone paths, approval paths, timesheet profile id - to name a few. But they do have the ability to create and manage portfolios/programs