Remove access to Setup and Maintenance task from a set of roles

Content

We have requirement to remove access to Setup and Maintenance task from a set of roles.

This requires deleting setup and maintenance applications privilege from the roles. Here this privilege might be inherited from different roles and not current role which involves creating custom roles where we are ending up creating too many custom roles are replacing it in the custom roles.

Is there any other methods to achieve this like through customization, hiding setup and maintenance from navigator, spring board and from settings and actions dropdown from the icon at the right top corner of the application( We are unable to hide this rom setting s and actions dropdown from the icon at the right top corner of the application)