Can I limit someone to certain brands or actions?

Yes, on the Team page. Pick their brands and tick the permissions they need, within what their role allows.

You can only give permissions you hold yourself, and the last owner can't be removed or demoted.